diff --git a/resources/lang/en.json b/resources/lang/en.json
index 35a2bd36df3..5d55d86f365 100644
--- a/resources/lang/en.json
+++ b/resources/lang/en.json
@@ -1732,11 +1732,19 @@
     "milestones": "Milestones",
     "no_clans": "This player isn't in any clans.",
     "no_prestige": "Hasn't prestiged yet",
-    "not_found": "Player profile not found",
+    "not_found_body": "We couldn't find a player at this link. It may be mistyped, or the account may have been deleted.",
+    "not_found_title": "Player not found",
+    "play": "Play OpenFront",
     "prestige_history": "Prestige history",
     "share": "Share Profile",
+    "share_copy_link": "Copy link",
+    "share_discord": "Copy for Discord",
+    "share_native": "Share",
+    "share_text": "Check out {name}'s profile on OpenFront",
+    "share_x": "Share on X",
     "title": "Player Profile",
-    "view": "View Profile"
+    "view": "View Profile",
+    "view_leaderboard": "View leaderboard"
   },
   "player_stats_table": {
     "arrived": "Arrived",
@@ -1838,6 +1846,7 @@
     "keep_holding": "Keep holding…",
     "load_failed": "Couldn't open Prestige. Check your connection and try again.",
     "ready": "Level 100! Until you prestige, XP only adds to your lifetime total.",
+    "share_text": "I just reached Prestige {rank} on OpenFront!",
     "stale": "Your level changed since this page loaded, so your account has been refreshed.",
     "stale_failed": "Your level changed since this page loaded. Reload the page to see where you are.",
     "submitting": "Prestiging…",
@@ -1912,6 +1921,10 @@
     "penalty_line": "−{percent}% XP ({source})",
     "prestige": "Prestige {prestige}",
     "prestige_short": "P{prestige}",
+    "share_moment_legend": "Share Legend",
+    "share_moment_level": "Share Level {level}",
+    "share_text_legend": "I just became a Legend on OpenFront!",
+    "share_text_level": "I just reached Level {level} on OpenFront!",
     "sign_in_to_earn": "Sign in to earn XP and level up.",
     "skip_reveal": "Skip",
     "tap_to_skip": "Tap to skip",
diff --git a/src/client/AccountModal.ts b/src/client/AccountModal.ts
index 2a940d80d8b..f826c007c9e 100644
--- a/src/client/AccountModal.ts
+++ b/src/client/AccountModal.ts
@@ -215,6 +215,7 @@ export class AccountModal extends BaseModal {
         <div class="p-6">${this.renderTab(tab)}</div>
       </div>
       <prestige-flow
+        .publicId=${this.userMeResponse?.player?.publicId ?? ""}
         @prestiged=${this.handlePrestiged}
         @prestige-stale=${this.handlePrestigeStale}
       ></prestige-flow>
diff --git a/src/client/Main.ts b/src/client/Main.ts
index 82ab3103482..fabb7a0fe08 100644
--- a/src/client/Main.ts
+++ b/src/client/Main.ts
@@ -157,6 +157,7 @@ import {
   installDoubleTapZoomBlocker,
   installSafariPinchZoomBlocker,
 } from "./utilities/DisableSafariPinchZoom";
+import { playerProfileRouteArgs } from "./utilities/PlayerProfileUrl";
 
 import "./components/DesktopNavBar";
 import "./components/Footer";
@@ -475,6 +476,8 @@ class Client {
       tag: "player-profile-modal",
       pageId: "page-profile",
     });
+    // The canonical profile link, `/player/<id>` (see playerProfileUrl).
+    modalRouter.registerPath("profile", playerProfileRouteArgs);
     modalRouter.register("help", { tag: "help-modal", pageId: "page-help" });
     modalRouter.register("news", { tag: "news-modal", pageId: "page-news" });
     modalRouter.register("language", {
@@ -1398,6 +1401,10 @@ class Client {
       console.log(`${spectate ? "spectating" : "joining"} lobby ${lobbyId}`);
       return;
     }
+    // A shared profile link (`/player/<id>`) opens that profile.
+    if (modalRouter.routeFromPath()) {
+      return;
+    }
     if (modalRouter.routeFromHash()) {
       return;
     }
diff --git a/src/client/ModalRouter.ts b/src/client/ModalRouter.ts
index c7a71dfb98b..63a87286bf7 100644
--- a/src/client/ModalRouter.ts
+++ b/src/client/ModalRouter.ts
@@ -7,9 +7,22 @@
  *
  * Lobby modals (join/host) and matchmaking are intentionally not registered:
  * they have their own URL state (path-based) or none at all.
+ *
+ * A modal can also be opened by a path link (`/player/<id>`, see
+ * registerPath). While it stays open the URL keeps that path, with tab
+ * changes written to `?tab=`; closing it returns the URL to the home page, so
+ * a reload doesn't reopen it. Opening another modal, in-app or from the hash,
+ * hands the URL to the hash and leaves the path the same way.
  */
 
 import { loadModal } from "./LazyModals";
+import { pagePin } from "./PagePin";
+
+/** Parses a page location into a modal's open() args, or null if it isn't one. */
+export type PathRouteParser = (location: {
+  pathname: string;
+  search: string;
+}) => Record<string, unknown> | null;
 
 interface RegistryEntry {
   /** Custom element tag, e.g. "store-modal". */
@@ -34,11 +47,57 @@ class ModalRouter {
   private currentName: string | null = null;
   /** True while we're routing from the URL (suppress modal→URL sync). */
   private routingFromUrl = false;
+  private pathRoutes = new Map<string, PathRouteParser>();
+  /** Name of the modal the URL's path (not its hash) reflects, if any. */
+  private pathRoutedName: string | null = null;
 
   register(name: string, entry: RegistryEntry): void {
     this.registry.set(name, entry);
   }
 
+  /** Let a registered modal be opened by a path link as well as the hash. */
+  registerPath(name: string, parse: PathRouteParser): void {
+    this.pathRoutes.set(name, parse);
+  }
+
+  /**
+   * Open the modal the current path names, if one does. Returns true when it
+   * did (the open itself is asynchronous, as for routeFromHash).
+   */
+  routeFromPath(): boolean {
+    for (const [name, parse] of this.pathRoutes) {
+      const entry = this.registry.get(name);
+      if (entry === undefined) continue;
+      const args = parse(window.location);
+      if (args === null) continue;
+      this.pathRoutedName = name;
+      void this.openRegistered(name, entry, args);
+      return true;
+    }
+    return false;
+  }
+
+  /** True while the named modal is open from a path link. */
+  isPathRouted(name: string): boolean {
+    return this.pathRoutedName === name;
+  }
+
+  // The path link has had its say: put the URL back to the home page. The
+  // home page keeps the page's version pin when it has one (see
+  // currentPagePath in Utils, which this mirrors without its imports). A
+  // `#modal=` hash stays: it's another modal's, and that modal is still open.
+  private leavePath(): void {
+    if (this.pathRoutedName === null) return;
+    this.pathRoutedName = null;
+    const commit = pagePin();
+    history.replaceState(
+      history.state,
+      "",
+      (commit === null ? "/" : `/v/${commit}/`) +
+        (this.isHashRouted() ? window.location.hash : ""),
+    );
+  }
+
   /**
    * Parse `window.location.hash` for `#modal=<name>&...`. If present and
    * registered, open the modal with the remaining keys as args. Returns true
@@ -66,6 +125,11 @@ class ModalRouter {
       args[key] = value;
     });
 
+    // The hash names the modal now, as when one opens in-app (syncOpened).
+    // Left on, the path would outlive the modal it names: the router stops
+    // tracking that modal, so its close wouldn't clear the path, and the next
+    // reload would open it again.
+    this.leavePath();
     void this.openRegistered(name, entry, args);
     return true;
   }
@@ -85,8 +149,14 @@ class ModalRouter {
       return;
     }
     await customElements.whenDefined(entry.tag);
-    // A slow load can land after the URL has moved on to another modal.
-    if (this.currentHashParams().get("modal") !== name) return;
+    // A slow load can land after the URL has moved on to another modal. The
+    // URL names this one by its hash, or by its path while path-routed.
+    if (
+      this.currentHashParams().get("modal") !== name &&
+      this.pathRoutedName !== name
+    ) {
+      return;
+    }
 
     this.routingFromUrl = true;
     try {
@@ -108,6 +178,8 @@ class ModalRouter {
   syncOpened(name: string, args?: Record<string, unknown>): void {
     if (this.routingFromUrl) return; // we're driving the modal from the URL; don't loop
     if (!this.registry.has(name)) return;
+    // Another modal (or this one again) opened in-app: the hash takes over.
+    this.leavePath();
     this.currentName = name;
     this.writeHash(name, args);
   }
@@ -115,6 +187,13 @@ class ModalRouter {
   /** Called by BaseModal.close() when a router-managed modal closes. */
   syncClosed(name: string): void {
     if (this.routingFromUrl) return;
+    // The path names this modal whichever modal the router last recorded, so
+    // its close always leaves the path.
+    if (this.pathRoutedName === name) {
+      if (this.currentName === name) this.currentName = null;
+      this.leavePath();
+      return;
+    }
     if (this.currentName !== name) return; // not the active routed modal
     this.currentName = null;
     this.replaceHash("");
@@ -124,6 +203,24 @@ class ModalRouter {
   syncTab(name: string, tab: string): void {
     if (this.routingFromUrl) return;
     if (this.currentName !== name) return;
+    if (this.pathRoutedName === name) {
+      // Opened from a path: the path stays, and the tab rides as `?tab=`.
+      const search = new URLSearchParams(window.location.search);
+      if (tab) {
+        search.set("tab", tab);
+      } else {
+        search.delete("tab");
+      }
+      const query = search.toString();
+      history.replaceState(
+        history.state,
+        "",
+        window.location.pathname +
+          (query ? `?${query}` : "") +
+          window.location.hash,
+      );
+      return;
+    }
     const params = this.currentHashParams();
     params.set("modal", name);
     if (tab) {
@@ -138,6 +235,8 @@ class ModalRouter {
   syncArgs(name: string, args: Record<string, unknown>): void {
     if (this.routingFromUrl) return;
     if (this.currentName !== name) return;
+    // The path is the state of a path-routed modal; don't add a hash to it.
+    if (this.pathRoutedName === name) return;
     const params = this.currentHashParams();
     params.set("modal", name);
     for (const [key, value] of Object.entries(args)) {
diff --git a/src/client/MomentShare.ts b/src/client/MomentShare.ts
new file mode 100644
index 00000000000..3ffb1797d15
--- /dev/null
+++ b/src/client/MomentShare.ts
@@ -0,0 +1,99 @@
+import type { GameXpPanelState } from "./components/GameXpPanel";
+import {
+  isMilestoneLevel,
+  levelsReachedInGame,
+  MAX_LEVEL,
+  MAX_PRESTIGE,
+  reachedLegendThisGame,
+} from "./Progression";
+import { playerProfileUrl } from "./utilities/PlayerProfileUrl";
+import { translateText } from "./Utils";
+
+// A progression moment worth sharing: a milestone level, becoming a Legend,
+// or a new prestige rank. Shared as the player's profile link with the moment
+// named in `?moment=`, so the link unfurls into a card for it.
+export type ShareMoment =
+  | { kind: "level"; level: number }
+  | { kind: "legend" }
+  | { kind: "prestige"; rank: number };
+
+/**
+ * The moment a finished game is worth sharing for, or null. Only the server's
+ * result counts (never a provisional figure), and only a milestone level or
+ * becoming a Legend: an ordinary level-up isn't shared. A Legend beats any
+ * level, and of several milestones reached in one game the highest is shared.
+ */
+export function gameShareMoment(view: GameXpPanelState): ShareMoment | null {
+  if (view.kind !== "result" || !view.data.eligible) return null;
+  const data = view.data;
+  if (reachedLegendThisGame(data)) return { kind: "legend" };
+  const milestones = levelsReachedInGame(data)
+    .map((l) => l.level)
+    .filter(isMilestoneLevel);
+  if (milestones.length === 0) return null;
+  return { kind: "level", level: Math.max(...milestones) };
+}
+
+// The moments the site's card route draws: a level from 2 (the first one
+// reached) to the last, and a prestige rank from 1 to the last. It answers
+// anything else with a 400, which unfurls as no image at all.
+function inRange(n: number, min: number, max: number): boolean {
+  return Number.isInteger(n) && n >= min && n <= max;
+}
+
+/**
+ * The `?moment=` value: `level50`, `legend`, `prestige3`. Null for a level or
+ * rank the card route wouldn't draw (a surprising server value), so the
+ * share is dropped rather than sending a link that unfurls without a card.
+ */
+export function momentSlug(moment: ShareMoment): string | null {
+  switch (moment.kind) {
+    case "level":
+      return inRange(moment.level, 2, MAX_LEVEL)
+        ? `level${moment.level}`
+        : null;
+    case "legend":
+      return "legend";
+    case "prestige":
+      return inRange(moment.rank, 1, MAX_PRESTIGE)
+        ? `prestige${moment.rank}`
+        : null;
+  }
+}
+
+/**
+ * The player's profile link with the moment: `/player/<id>?moment=level50`.
+ * Null when the moment has no slug (see momentSlug): nothing to share.
+ */
+export function momentShareUrl(
+  publicId: string,
+  moment: ShareMoment,
+): string | null {
+  const slug = momentSlug(moment);
+  return slug === null ? null : `${playerProfileUrl(publicId)}?moment=${slug}`;
+}
+
+/** The line that goes with the link ("I just reached Level 50 on OpenFront!"). */
+export function momentShareText(moment: ShareMoment): string {
+  switch (moment.kind) {
+    case "level":
+      return translateText("progression.share_text_level", {
+        level: moment.level,
+      });
+    case "legend":
+      return translateText("progression.share_text_legend");
+    case "prestige":
+      return translateText("prestige.share_text", { rank: moment.rank });
+  }
+}
+
+/** The share button's label for a game's moment ("Share Level 50"). */
+export function momentShareLabel(
+  moment: Exclude<ShareMoment, { kind: "prestige" }>,
+): string {
+  return moment.kind === "legend"
+    ? translateText("progression.share_moment_legend")
+    : translateText("progression.share_moment_level", {
+        level: moment.level,
+      });
+}
diff --git a/src/client/PlayerProfileModal.ts b/src/client/PlayerProfileModal.ts
index 86b21d198d0..72fe83ce94d 100644
--- a/src/client/PlayerProfileModal.ts
+++ b/src/client/PlayerProfileModal.ts
@@ -9,6 +9,7 @@ import { customElement, state } from "lit/decorators.js";
 import { ClientEnv } from "src/client/ClientEnv";
 import { fetchPublicPlayerProfile } from "./Api";
 import "./ClanModal";
+import "./components/baseComponents/Button";
 import "./components/baseComponents/stats/PlayerGameHistoryView";
 import type { PlayerGameHistoryCache } from "./components/baseComponents/stats/PlayerGameHistoryView";
 import "./components/baseComponents/stats/PlayerStatsTree";
@@ -17,13 +18,18 @@ import "./components/clan/ClanCard";
 import "./components/PlayerName";
 import "./components/ProfileCard";
 import "./components/ProfileProgression";
+import "./components/ProfileShare";
 import { modalHeader } from "./components/ui/ModalHeader";
 import { usernameText } from "./components/ui/UsernameText";
 import { verifiedBadge } from "./components/ui/VerifiedBadge";
 import "./GameStatsModal";
 import "./LeaderboardModal";
+import { modalRouter } from "./ModalRouter";
 import { fetchPublicPlayerProgress } from "./ProgressionApi";
-import { playerProfileUrl } from "./utilities/PlayerProfileUrl";
+import {
+  parsePlayerProfilePath,
+  playerProfileUrl,
+} from "./utilities/PlayerProfileUrl";
 import { currentPagePath, translateText } from "./Utils";
 
 export { playerProfileUrl };
@@ -45,6 +51,9 @@ export class PlayerProfileModal extends BaseModal {
   // Level / XP, when progression is on and the player has any.
   @state() private progress: PublicProgress | null = null;
   @state() private loading = false;
+  // The link this profile was opened from (`openfront.io/player/<id>`), when
+  // it was opened from one: the not-found state shows it.
+  @state() private openedLink: string | null = null;
   private openedFrom: ProfileOrigin | null = null;
   // Mirrors the account modal's Games tab: keep the accumulated history list +
   // cursor across tab switches (and the game-stats detour) so re-entering Games
@@ -238,10 +247,16 @@ export class PlayerProfileModal extends BaseModal {
     if (this.loading) {
       return this.renderLoadingSpinner(translateText("player_profile.loading"));
     }
-    if (!this.profileLoaded()) {
+    const publicId = this.publicId;
+    if (!this.profileLoaded() || publicId === null) {
       return this.renderNotFound();
     }
-    // The card heads the stats; games and wins stay in the stats below it.
+    // The card heads the stats; games and wins stay in the stats below it,
+    // and the ways to share the profile follow it.
+    //
+    // A "Show my profile in search engines" setting will join the account
+    // settings' Privacy card once the API carries the flag and the site
+    // Worker honours it with noindex; profile links are indexable until then.
     return html`
       ${this.progress === null
         ? nothing
@@ -252,6 +267,11 @@ export class PlayerProfileModal extends BaseModal {
             .progress=${this.progress}
             .openKey=${`profile-${this.openCount}`}
           ></profile-card>`}
+      <profile-share
+        class="mb-[18px] block"
+        .url=${playerProfileUrl(publicId)}
+        .name=${this.username ?? publicId}
+      ></profile-share>
       <player-stats-tree-view
         .statsTree=${this.statsTree}
       ></player-stats-tree-view>
@@ -290,15 +310,95 @@ export class PlayerProfileModal extends BaseModal {
 
   private renderNotFound() {
     return html`
-      <div class="flex flex-col items-center justify-center p-12 text-center">
-        <span class="text-4xl mb-4">📊</span>
-        <p class="text-white/40 text-sm">
-          ${translateText("player_profile.not_found")}
+      <div
+        class="mx-auto flex max-w-2xl flex-col items-center px-6 py-12 text-center"
+        data-not-found
+      >
+        <div
+          class="mb-5 flex h-20 w-20 items-center justify-center rounded-full border border-white/10 bg-white/5 text-white/50"
+        >
+          <svg
+            width="40"
+            height="40"
+            viewBox="0 0 24 24"
+            fill="none"
+            stroke="currentColor"
+            stroke-width="1.8"
+            stroke-linecap="round"
+            stroke-linejoin="round"
+            aria-hidden="true"
+          >
+            <circle cx="9" cy="8" r="4" />
+            <path d="M2 21v-1a6 6 0 0 1 6-6h2a6 6 0 0 1 3 .8" />
+            <path d="M17 14.5a2.5 2.5 0 1 1 3.2 2.4c-.7.2-1.2.8-1.2 1.6" />
+            <path d="M19 21h.01" />
+          </svg>
+        </div>
+        <h2 class="text-xl font-bold text-white">
+          ${translateText("player_profile.not_found_title")}
+        </h2>
+        <p class="mt-2 max-w-md text-sm text-white/60">
+          ${translateText("player_profile.not_found_body")}
         </p>
+        ${this.openedLink === null
+          ? nothing
+          : html`<p
+              class="mt-3 break-all font-mono text-xs text-white/35"
+              data-opened-link
+            >
+              ${this.openedLink}
+            </p>`}
+        <!-- Side by side where there's room, stacked on a phone. -->
+        <div
+          class="mt-6 flex flex-col items-stretch justify-center gap-3 sm:flex-row sm:items-center"
+          data-not-found-actions
+        >
+          <o-button
+            variant="primary"
+            size="md"
+            translationKey="player_profile.play"
+            data-action="play"
+            @click=${() => this.goHome()}
+          ></o-button>
+          <o-button
+            variant="secondary"
+            size="md"
+            translationKey="player_profile.view_leaderboard"
+            data-action="leaderboard"
+            @click=${() => this.openLeaderboard()}
+          ></o-button>
+        </div>
       </div>
     `;
   }
 
+  // Close the profile onto the home page (the URL follows: see ModalRouter).
+  private goHome(): void {
+    this.close();
+  }
+
+  private openLeaderboard(): void {
+    this.close();
+    document
+      .querySelector<HTMLElement & { open(): void }>("leaderboard-modal")
+      ?.open();
+  }
+
+  // Opening another player's profile over this one: BaseModal syncs the URL
+  // only when a modal first opens, which would leave it naming the last
+  // player (its `/player/<id>` path, or its `#modal=` hash), with tab changes
+  // written onto that and a reload opening the wrong profile. Hand the URL to
+  // the new player as an in-app open does. The router ignores this while it
+  // is the one opening the modal (from a path or the hash).
+  public override open(args?: Record<string, unknown>): void {
+    const wasOpen = this.isOpen();
+    const before = this.publicId;
+    super.open(args);
+    if (wasOpen && this.isOpen() && this.publicId !== before) {
+      modalRouter.syncOpened(this.routerName, args);
+    }
+  }
+
   protected onOpen(args?: Record<string, unknown>): void {
     const publicId =
       typeof args?.publicID === "string" && args.publicID.length > 0
@@ -348,6 +448,14 @@ export class PlayerProfileModal extends BaseModal {
     this.gameHistoryCache = null;
     this.gamesScrollTop = 0;
     this.restoreGamesScrollAfterOpen = false;
+    // Only while the path is this player's: the URL can still name the last
+    // one for the moment (see open()).
+    this.openedLink =
+      publicId !== null &&
+      modalRouter.isPathRouted("profile") &&
+      parsePlayerProfilePath(window.location.pathname) === publicId
+        ? `${window.location.host}${window.location.pathname}`
+        : null;
     this.loading = publicId !== null;
     if (publicId !== null) {
       void this.loadProfile(publicId);
diff --git a/src/client/components/FriendsList.ts b/src/client/components/FriendsList.ts
index 54a60ea9d6a..4efc5df89d5 100644
--- a/src/client/components/FriendsList.ts
+++ b/src/client/components/FriendsList.ts
@@ -10,14 +10,16 @@ import {
   sendFriendRequest,
 } from "../FriendsApi";
 import { showInGameConfirm } from "../InGameModal";
+import { parsePlayerProfilePath } from "../utilities/PlayerProfileUrl";
 import { showToast, translateText } from "../Utils";
 import { playerNameLink } from "./ui/PlayerNameLink";
 
 const PAGE_LIMIT = 20;
 
 /**
- * Accept a pasted profile share link (`…#modal=profile&publicID=abc12345`) and
- * keep only the id, mirroring the private-lobby join box. Only strings that are
+ * Accept a pasted profile share link (`…/player/abc12345`, or the older
+ * `…#modal=profile&publicID=abc12345`) and keep only the id, mirroring the
+ * private-lobby join box. Only strings that are
  * actually URLs are touched: usernames render as `wonder #5005`, so a bare `#`
  * must be left alone.
  */
@@ -32,6 +34,9 @@ export function extractPublicIdFromUrl(input: string): string {
     // so don't log; just hand the raw text back for the server to reject.
     return input;
   }
+  // The canonical link names the player in its path.
+  const fromPath = parsePlayerProfilePath(url.pathname);
+  if (fromPath !== null) return fromPath;
   // Modals are hash-routed (`…/#modal=profile&publicID=abc12345`), so the id is
   // in the fragment, not the query string — `url.searchParams` is always empty
   // here. Parse the fragment's own `key=value&…` pairs instead.
diff --git a/src/client/components/GameXpPanel.ts b/src/client/components/GameXpPanel.ts
index 62613304c85..043b20a8a9a 100644
--- a/src/client/components/GameXpPanel.ts
+++ b/src/client/components/GameXpPanel.ts
@@ -149,6 +149,8 @@ export class GameXpPanel extends LitElement {
   // The Legend result already announced (see announceLegend).
   private announcedLegend: GameXpEligible | null = null;
   private timers: ReturnType<typeof setTimeout>[] = [];
+  // The result last announced as settled (see updated()).
+  private settledView: GameXpPanelState | null = null;
 
   createRenderRoot() {
     return this;
@@ -487,6 +489,7 @@ export class GameXpPanel extends LitElement {
 
   protected updated(changed: PropertyValues<this>): void {
     super.updated(changed);
+    this.announceSettled();
     // A Legend result shown without its reveal reaching level 100 (reduced
     // motion, a skip, or it arrived while the popup was hidden) still gets
     // its moment, once it's on screen.
@@ -502,6 +505,21 @@ export class GameXpPanel extends LitElement {
     }
   }
 
+  // Tells the host once a result is showing in full: its reveal has ended or
+  // been skipped, or there was none. Once per result (`detail` is the view).
+  private announceSettled(): void {
+    const view = this.view;
+    if (view.kind !== "result" || this.reveal !== null) return;
+    if (this.settledView === view) return;
+    this.settledView = view;
+    this.dispatchEvent(
+      new CustomEvent<GameXpPanelState>("xp-reveal-settled", {
+        detail: view,
+        bubbles: true,
+      }),
+    );
+  }
+
   // Ends any reveal on its final state (a no-op when none is playing).
   private skipReveal(): void {
     this.clearTimers();
diff --git a/src/client/components/LegendCeremony.ts b/src/client/components/LegendCeremony.ts
index 8d0eacc29a4..131a6296e8d 100644
--- a/src/client/components/LegendCeremony.ts
+++ b/src/client/components/LegendCeremony.ts
@@ -7,6 +7,7 @@ import {
   TemplateResult,
 } from "lit";
 import { customElement, state } from "lit/decorators.js";
+import { momentShareText, momentShareUrl } from "../MomentShare";
 import { MAX_PRESTIGE } from "../Progression";
 import { translateText } from "../Utils";
 import {
@@ -15,6 +16,7 @@ import {
   renderHoneycomb,
 } from "./Ceremony";
 import "./LevelBadge";
+import "./ProfileShare";
 import { formatXp } from "./XpBar";
 
 // Becoming a Legend (Prestige 10, level 99 to 100): the whole screen, once
@@ -22,8 +24,9 @@ import { formatXp } from "./XpBar";
 // it and the honeycomb pulsing in toward it, implodes to a point of light, and
 // the Legend crown drops in and lands hard: a gold flash, two shockwaves, the
 // screen shaking and two gold waves running out across the honeycomb. LEGEND
-// slams in and a gold sweep runs through it, then a line on what it took, and
-// Continue. At rest the crown breathes and the rays turn slowly.
+// slams in and a gold sweep runs through it, then a line on what it took, a
+// row to share it, and Continue. At rest the crown breathes and the rays turn
+// slowly.
 //
 // Any click or key skips to the end; Escape (or Continue) then closes it.
 // Emits `legend-ceremony-closed` when it closes.
@@ -59,6 +62,8 @@ export interface LegendMoment {
   lifetimeXp: number;
   // When it happened.
   at: Date;
+  // Whose it is, for the share link. Empty: no share row.
+  publicId: string;
 }
 
 const SEEN_PREFIX = "legendCeremonySeen:";
@@ -215,7 +220,8 @@ export class LegendCeremony extends LitElement {
   }
 
   // Every key while it's up stays with it. Before the end any key skips;
-  // at the end Escape closes and Tab stays on Continue.
+  // at the end Escape closes and Tab moves between the share buttons and
+  // Continue without leaving the ceremony.
   private onKeyDown = (e: KeyboardEvent): void => {
     if (this.moment === null) return;
     e.stopPropagation();
@@ -229,7 +235,19 @@ export class LegendCeremony extends LitElement {
       this.close();
     } else if (e.key === "Tab") {
       e.preventDefault();
-      this.continueButton()?.focus();
+      const buttons = [
+        ...(this.root()?.querySelectorAll<HTMLButtonElement>(
+          "button:not([disabled])",
+        ) ?? []),
+      ];
+      if (buttons.length === 0) return;
+      // From anywhere else, back to Continue (the last).
+      const at = buttons.indexOf(document.activeElement as HTMLButtonElement);
+      const next =
+        at === -1
+          ? buttons.length - 1
+          : (at + (e.shiftKey ? -1 : 1) + buttons.length) % buttons.length;
+      buttons[next].focus();
     }
   };
 
@@ -371,6 +389,29 @@ export class LegendCeremony extends LitElement {
       </div>`;
   }
 
+  // Sharing it, between the line and Continue, the same as the prestige
+  // ceremony's row. The ceremony skips (or, done, does nothing) on any
+  // click; the row keeps its clicks. It is simply there, without the rise
+  // the Continue button has.
+  private renderShare(moment: LegendMoment): TemplateResult | typeof nothing {
+    if (moment.publicId === "") return nothing;
+    const share = { kind: "legend" } as const;
+    const url = momentShareUrl(moment.publicId, share);
+    if (url === null) return nothing;
+    return html`<div
+      data-legend-share
+      class="lc-share"
+      @click=${(e: Event) => e.stopPropagation()}
+    >
+      <profile-share
+        solid
+        centered
+        .url=${url}
+        .text=${momentShareText(share)}
+      ></profile-share>
+    </div>`;
+  }
+
   private renderCeremony(moment: LegendMoment): TemplateResult {
     const done = this.beat === "done";
     const shaking = this.reached("impact") && !this.landed;
@@ -407,6 +448,7 @@ export class LegendCeremony extends LitElement {
               </div>`
             : nothing}
           ${this.reached("line") ? this.renderLine(moment) : nothing}
+          ${done ? this.renderShare(moment) : nothing}
           ${done
             ? html`<div
                 class="lc-actions ${this.skipped ? "lc-final-in" : "lc-rise"}"
@@ -967,8 +1009,12 @@ const LEGEND_STYLES = html`<style>
       transform: translateY(12px);
     }
   }
+  .lc-share {
+    margin-top: 24px;
+    padding: 0 16px;
+  }
   .lc-actions {
-    margin-top: 26px;
+    margin-top: 24px;
     display: flex;
     flex-direction: column;
     align-items: center;
diff --git a/src/client/components/PrestigeFlow.ts b/src/client/components/PrestigeFlow.ts
index 7ab81125f2c..74783eed0e1 100644
--- a/src/client/components/PrestigeFlow.ts
+++ b/src/client/components/PrestigeFlow.ts
@@ -12,7 +12,8 @@ import {
   PropertyValues,
   TemplateResult,
 } from "lit";
-import { customElement, state } from "lit/decorators.js";
+import { customElement, property, state } from "lit/decorators.js";
+import { momentShareText, momentShareUrl } from "../MomentShare";
 import {
   MAX_LEVEL,
   MAX_PRESTIGE,
@@ -29,6 +30,7 @@ import {
 } from "./Ceremony";
 import { describeFlareCosmetic, FlareCosmeticView } from "./FlareCosmetic";
 import "./LevelBadge";
+import "./ProfileShare";
 import { formatXp } from "./XpBar";
 
 // Prestiging, start to finish: the confirmation (the player's badge as it is
@@ -165,6 +167,8 @@ function newIdempotencyKey(): string {
 
 @customElement("prestige-flow")
 export class PrestigeFlow extends LitElement {
+  // The player's public ID, for the ceremony's share link. Empty: no share.
+  @property({ type: String }) publicId = "";
   @state() private stage: Stage = "closed";
   // Progress before prestiging.
   @state() private prior: Progress | null = null;
@@ -970,6 +974,7 @@ export class PrestigeFlow extends LitElement {
               ${translateText("prestige.ceremony_title", { rank })}
             </div>`
           : nothing}
+        ${done ? this.renderShare(rank) : nothing}
         ${done
           ? html`<button
               type="button"
@@ -990,6 +995,30 @@ export class PrestigeFlow extends LitElement {
     </div>`;
   }
 
+  // Sharing the new rank, between the title and Continue. The ceremony
+  // skips (or, done, does nothing) on any click; the row keeps its clicks.
+  // It is simply there, without the rise the Continue button has.
+  private renderShare(rank: number): TemplateResult | typeof nothing {
+    if (this.publicId === "") return nothing;
+    const moment = { kind: "prestige", rank } as const;
+    // The rank is the server's: one the card route wouldn't draw drops the
+    // row rather than sharing a link that unfurls without a card.
+    const url = momentShareUrl(this.publicId, moment);
+    if (url === null) return nothing;
+    return html`<div
+      data-prestige-share
+      class="mt-6"
+      @click=${(e: Event) => e.stopPropagation()}
+    >
+      <profile-share
+        solid
+        centered
+        .url=${url}
+        .text=${momentShareText(moment)}
+      ></profile-share>
+    </div>`;
+  }
+
   private renderStyles(): TemplateResult {
     return html`<style>
       .prestige-honeycomb {
diff --git a/src/client/components/ProfileShare.ts b/src/client/components/ProfileShare.ts
new file mode 100644
index 00000000000..8eee4c7c0b1
--- /dev/null
+++ b/src/client/components/ProfileShare.ts
@@ -0,0 +1,496 @@
+import { html, LitElement, nothing, TemplateResult } from "lit";
+import { customElement, property, state } from "lit/decorators.js";
+import { Platform } from "../Platform";
+import { copyToClipboard, showToast, translateText } from "../Utils";
+
+// Ways to pass a profile on: copy the link, post it to X, or copy a ready
+// message for Discord (which unfurls the link into the profile card). On a
+// phone or tablet with a native share sheet, one Share button opens that
+// instead, since it already offers every app the player has.
+//
+// Laid out as a row of buttons (the profile, the prestige ceremony), or as one
+// labelled button that opens the same three as a menu (the end-of-game
+// popup's footer, where a row doesn't fit). The link can carry a moment
+// (`?moment=level50`) with its own line: see MomentShare.
+
+/** The X (Twitter) compose URL for a link and a line of text. */
+export function xShareUrl(url: string, text: string): string {
+  return `https://x.com/intent/post?url=${encodeURIComponent(url)}&text=${encodeURIComponent(text)}`;
+}
+
+/** What "Copy for Discord" puts on the clipboard: the line, then the link. */
+export function discordShareText(url: string, text: string): string {
+  return `${text}\n${url}`;
+}
+
+// The native share sheet, where there is one to use. Desktop Chrome on
+// Windows has navigator.share too, but there the three buttons say more than
+// a generic Share, so the sheet is kept to touch devices.
+export function useNativeShare(): boolean {
+  return (
+    typeof navigator !== "undefined" &&
+    typeof navigator.share === "function" &&
+    Platform.isTouch
+  );
+}
+
+const BUTTON_BASE =
+  "relative inline-flex min-h-[38px] items-center gap-2 rounded-[10px] border px-3.5 text-[13px] font-semibold text-white transition-colors focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-white/30";
+// On a panel, the buttons are a light tint of it.
+const BUTTON = `${BUTTON_BASE} border-white/15 bg-white/5 hover:bg-white/10`;
+// Over a busy backdrop (the prestige ceremony's honeycomb), they need a
+// backing of their own to read.
+const BUTTON_SOLID = `${BUTTON_BASE} border-white/20 bg-zinc-900/85 shadow-lg backdrop-blur-sm hover:bg-zinc-800/95`;
+
+// The share ring: a quick yellow flash around a share button when a mouse
+// moves onto it or the keyboard focuses it. At full strength at once, held,
+// then out while it grows a little. Once per hover: a new hover while one is
+// still playing is ignored. Only where there is a real hover (a mouse or a
+// trackpad), never on touch, and not at all under reduced motion.
+//
+// The ring is an element of its own, never a pseudo-element on the button:
+// the menu's trigger takes its classes from the host, and WinModal's
+// .win-action::after is already its hover light streak.
+const RING_HOLD_MS = 80;
+const RING_FADE_MS = 320;
+const RING_MS = RING_HOLD_MS + RING_FADE_MS;
+const RING_OPACITY = 0.95;
+const RING_KEYFRAMES: Keyframe[] = [
+  { offset: 0, opacity: RING_OPACITY, transform: "scale(1)", easing: "linear" },
+  {
+    offset: RING_HOLD_MS / RING_MS,
+    opacity: RING_OPACITY,
+    transform: "scale(1)",
+    easing: "ease-out",
+  },
+  { offset: 1, opacity: 0, transform: "scale(1.04)" },
+];
+// 4px outside the button, 2px thick. Its radius is the button's plus 4: set
+// when it plays, since the menu's trigger can be any shape. 14px fits the
+// row's 10px buttons.
+const RING =
+  "pointer-events-none absolute -inset-1 rounded-[14px] border-2 border-solid border-[rgba(250,204,21,0.95)] opacity-0 shadow-[0_0_12px_rgba(250,204,21,0.45)]";
+
+/** Whether this device shows the share ring: a fine hover pointer, motion on. */
+export function shareRingEnabled(): boolean {
+  if (typeof window === "undefined" || typeof window.matchMedia !== "function")
+    return false;
+  return (
+    window.matchMedia("(hover: hover) and (pointer: fine)").matches &&
+    !window.matchMedia("(prefers-reduced-motion: reduce)").matches
+  );
+}
+
+const ringTemplate = html`<span
+  data-share-ring
+  class=${RING}
+  aria-hidden="true"
+></span>`;
+
+const MENU_ITEM =
+  "flex min-h-10 w-full items-center gap-2.5 rounded-lg border-0 bg-transparent px-3 text-left text-sm font-semibold text-white transition-colors hover:bg-white/10 focus-visible:bg-white/10 focus-visible:outline-hidden";
+
+const linkIcon = html`<svg
+  width="16"
+  height="16"
+  viewBox="0 0 24 24"
+  fill="none"
+  stroke="currentColor"
+  stroke-width="2"
+  stroke-linecap="round"
+  aria-hidden="true"
+>
+  <path d="M10 14a5 5 0 0 0 7 0l3-3a5 5 0 0 0-7-7l-1 1" />
+  <path d="M14 10a5 5 0 0 0-7 0l-3 3a5 5 0 0 0 7 7l1-1" />
+</svg>`;
+
+const xIcon = html`<svg
+  width="14"
+  height="14"
+  viewBox="0 0 24 24"
+  fill="currentColor"
+  aria-hidden="true"
+>
+  <path
+    d="M17.8 3h3.1l-6.8 7.8L22 21h-6.2l-4.9-6.4L5.3 21H2.2l7.3-8.3L2 3h6.4l4.4 5.8L17.8 3zm-1.1 16.2h1.7L7.4 4.7H5.6l11.1 14.5z"
+  />
+</svg>`;
+
+const chatIcon = html`<svg
+  width="16"
+  height="16"
+  viewBox="0 0 24 24"
+  fill="none"
+  stroke="currentColor"
+  stroke-width="2"
+  stroke-linejoin="round"
+  aria-hidden="true"
+>
+  <path d="M4 5h16v11H9l-5 4z" />
+</svg>`;
+
+const shareIcon = html`<svg
+  width="16"
+  height="16"
+  viewBox="0 0 24 24"
+  fill="none"
+  stroke="currentColor"
+  stroke-width="2"
+  stroke-linecap="round"
+  stroke-linejoin="round"
+  aria-hidden="true"
+>
+  <path d="M12 3v12" />
+  <path d="M7 8l5-5 5 5" />
+  <path d="M5 13v6a2 2 0 0 0 2 2h10a2 2 0 0 0 2-2v-6" />
+</svg>`;
+
+interface ShareAction {
+  action: "copy" | "x" | "discord";
+  icon: TemplateResult;
+  labelKey: string;
+}
+
+const ACTIONS: readonly ShareAction[] = [
+  {
+    action: "copy",
+    icon: linkIcon,
+    labelKey: "player_profile.share_copy_link",
+  },
+  { action: "x", icon: xIcon, labelKey: "player_profile.share_x" },
+  {
+    action: "discord",
+    icon: chatIcon,
+    labelKey: "player_profile.share_discord",
+  },
+];
+
+@customElement("profile-share")
+export class ProfileShare extends LitElement {
+  // The link to share: the canonical profile link (playerProfileUrl), or a
+  // moment's (momentShareUrl).
+  @property({ type: String }) url = "";
+  // The player's display name, for the profile's line that goes with the
+  // link. Unused when `text` is set.
+  @property({ type: String }) name = "";
+  // The line that goes with the link. Empty: the profile's own line.
+  @property({ type: String }) text = "";
+  // "row": the buttons side by side. "menu": one button, labelled `label`,
+  // that opens them as a menu (or the share sheet, on a touch device).
+  @property({ type: String }) layout: "row" | "menu" = "row";
+  @property({ type: String }) label = "";
+  // The menu button's classes, so it can match the buttons beside it.
+  @property({ type: String }) triggerClass = "";
+  // Opaque buttons, for a busy backdrop.
+  @property({ type: Boolean }) solid = false;
+  // Centre the row.
+  @property({ type: Boolean }) centered = false;
+
+  // Read out by screen readers after a copy: the toast that shows it is not
+  // a live region.
+  @state() private announcement = "";
+  @state() private menuOpen = false;
+  // The animation each ring last played, to leave it alone while it plays.
+  private rings = new WeakMap<Element, Animation>();
+
+  createRenderRoot() {
+    return this;
+  }
+
+  disconnectedCallback(): void {
+    this.listenOutside(false);
+    this.menuOpen = false;
+    super.disconnectedCallback();
+  }
+
+  private shareText(): string {
+    return this.text !== ""
+      ? this.text
+      : translateText("player_profile.share_text", { name: this.name });
+  }
+
+  private async copy(text: string): Promise<void> {
+    // Cleared first so copying twice announces twice.
+    this.announcement = "";
+    try {
+      await copyToClipboard(text);
+      const copied = translateText("common.copied");
+      showToast(copied, "green");
+      this.announcement = copied;
+    } catch {
+      const failed = translateText("common.failed_copy");
+      showToast(failed, "red");
+      this.announcement = failed;
+    }
+  }
+
+  // Opens in a new tab on the web. In the desktop shell, the shell's
+  // window-open policy sends every https link to the system browser (the
+  // same route the shell's other external links take, e.g. linkGoogle).
+  private shareOnX(): void {
+    window.open(
+      xShareUrl(this.url, this.shareText()),
+      "_blank",
+      "noopener,noreferrer",
+    );
+  }
+
+  private async nativeShare(): Promise<void> {
+    try {
+      await navigator.share({
+        title: translateText("player_profile.title"),
+        text: this.shareText(),
+        url: this.url,
+      });
+    } catch (err) {
+      // Dismissing the sheet rejects with AbortError: nothing to do. Any
+      // other failure falls back to copying the link.
+      if (err instanceof DOMException && err.name === "AbortError") return;
+      await this.copy(this.url);
+    }
+  }
+
+  private run(action: ShareAction["action"]): void {
+    switch (action) {
+      case "copy":
+        void this.copy(this.url);
+        return;
+      case "x":
+        this.shareOnX();
+        return;
+      case "discord":
+        void this.copy(discordShareText(this.url, this.shareText()));
+        return;
+    }
+  }
+
+  // ---------------------------------------------------------------------------
+  // Ring
+  // ---------------------------------------------------------------------------
+
+  // In the row the ring is inside its button. The menu's trigger clips its
+  // own content (.win-action is overflow: hidden), so there the ring is
+  // beside it, in the wrapper, which is exactly the trigger's size.
+  private ringOf(button: HTMLElement): HTMLElement | null {
+    return (
+      button.querySelector<HTMLElement>("[data-share-ring]") ??
+      button.parentElement?.querySelector<HTMLElement>(
+        ":scope > [data-share-ring]",
+      ) ??
+      null
+    );
+  }
+
+  private playRing(button: HTMLElement): void {
+    const ring = this.ringOf(button);
+    if (ring === null || typeof ring.animate !== "function") return;
+    if (!shareRingEnabled()) return;
+    // Still playing: leave it. (Read from currentTime rather than playState
+    // alone, so a paused, scrubbed timeline counts too.)
+    const last = this.rings.get(ring);
+    if (last !== undefined && last.playState !== "finished") {
+      const t = last.currentTime === null ? RING_MS : Number(last.currentTime);
+      if (t < RING_MS) return;
+    }
+    const radius = parseFloat(getComputedStyle(button).borderTopLeftRadius);
+    if (Number.isFinite(radius)) ring.style.borderRadius = `${radius + 4}px`;
+    this.rings.set(ring, ring.animate(RING_KEYFRAMES, { duration: RING_MS }));
+  }
+
+  private onRingPointer(e: PointerEvent): void {
+    if (e.pointerType === "mouse")
+      this.playRing(e.currentTarget as HTMLElement);
+  }
+
+  private onRingFocus(e: FocusEvent): void {
+    const button = e.currentTarget as HTMLElement;
+    let visible = false;
+    try {
+      visible = button.matches(":focus-visible");
+    } catch {
+      // No :focus-visible support: no ring on focus.
+    }
+    if (visible) this.playRing(button);
+  }
+
+  // ---------------------------------------------------------------------------
+  // Menu
+  // ---------------------------------------------------------------------------
+
+  private trigger(): HTMLButtonElement | null {
+    return this.querySelector<HTMLButtonElement>('[data-share="menu"]');
+  }
+
+  private menuItems(): HTMLButtonElement[] {
+    return [
+      ...this.querySelectorAll<HTMLButtonElement>("[data-share-menu] button"),
+    ];
+  }
+
+  private openMenu(): void {
+    this.menuOpen = true;
+    this.listenOutside(true);
+    void this.updateComplete.then(() => this.menuItems()[0]?.focus());
+  }
+
+  private closeMenu(refocus: boolean): void {
+    if (!this.menuOpen) return;
+    this.menuOpen = false;
+    this.listenOutside(false);
+    if (refocus) this.trigger()?.focus();
+  }
+
+  private onTrigger(): void {
+    if (useNativeShare()) {
+      void this.nativeShare();
+      return;
+    }
+    if (this.menuOpen) this.closeMenu(false);
+    else this.openMenu();
+  }
+
+  private listenOutside(on: boolean): void {
+    if (on) document.addEventListener("pointerdown", this.onOutside, true);
+    else document.removeEventListener("pointerdown", this.onOutside, true);
+  }
+
+  // A press anywhere else closes the menu.
+  private onOutside = (e: Event): void => {
+    if (!this.contains(e.target as Node)) this.closeMenu(false);
+  };
+
+  private onMenuKey(e: KeyboardEvent): void {
+    if (!this.menuOpen) return;
+    const items = this.menuItems();
+    const at = items.indexOf(document.activeElement as HTMLButtonElement);
+    let next: number;
+    switch (e.key) {
+      case "Escape":
+        // Only the menu closes: whatever holds it stays open.
+        e.preventDefault();
+        e.stopPropagation();
+        this.closeMenu(true);
+        return;
+      case "Tab":
+        this.closeMenu(false);
+        return;
+      case "ArrowDown":
+        next = at === -1 ? 0 : (at + 1) % items.length;
+        break;
+      case "ArrowUp":
+        next =
+          at === -1 ? items.length - 1 : (at - 1 + items.length) % items.length;
+        break;
+      case "Home":
+        next = 0;
+        break;
+      case "End":
+        next = items.length - 1;
+        break;
+      default:
+        return;
+    }
+    e.preventDefault();
+    items[next]?.focus();
+  }
+
+  private renderMenu(): TemplateResult {
+    const native = useNativeShare();
+    return html`<div
+      class="relative flex w-full"
+      @keydown=${(e: KeyboardEvent) => this.onMenuKey(e)}
+    >
+      <button
+        type="button"
+        data-share="menu"
+        class=${this.triggerClass || BUTTON}
+        aria-haspopup=${native ? nothing : "menu"}
+        aria-expanded=${native ? nothing : String(this.menuOpen)}
+        @click=${() => this.onTrigger()}
+        @pointerenter=${(e: PointerEvent) => this.onRingPointer(e)}
+        @focus=${(e: FocusEvent) => this.onRingFocus(e)}
+      >
+        <span class="relative inline-flex items-center gap-2"
+          >${shareIcon}<span>${this.label}</span></span
+        >
+      </button>
+      ${shareRingEnabled() ? ringTemplate : nothing}
+      ${this.menuOpen
+        ? html`<div
+            data-share-menu
+            role="menu"
+            aria-label=${this.label}
+            class="absolute bottom-[calc(100%+8px)] left-1/2 z-50 flex w-max min-w-[220px] -translate-x-1/2 flex-col gap-0.5 rounded-xl border border-white/15 bg-zinc-900 p-1.5 shadow-[0_12px_32px_rgba(0,0,0,0.55)]"
+          >
+            ${ACTIONS.map(
+              (a) =>
+                html`<button
+                  type="button"
+                  role="menuitem"
+                  data-share=${a.action}
+                  class=${MENU_ITEM}
+                  @click=${() => {
+                    this.run(a.action);
+                    this.closeMenu(true);
+                  }}
+                >
+                  <span class="grid w-[18px] place-items-center">${a.icon}</span
+                  ><span>${translateText(a.labelKey)}</span>
+                </button>`,
+            )}
+          </div>`
+        : nothing}
+    </div>`;
+  }
+
+  // ---------------------------------------------------------------------------
+  // Row
+  // ---------------------------------------------------------------------------
+
+  private button(
+    action: string,
+    icon: TemplateResult,
+    label: string,
+    onClick: () => void,
+  ): TemplateResult {
+    return html`<button
+      type="button"
+      class=${this.solid ? BUTTON_SOLID : BUTTON}
+      data-share=${action}
+      @click=${onClick}
+      @pointerenter=${(e: PointerEvent) => this.onRingPointer(e)}
+      @focus=${(e: FocusEvent) => this.onRingFocus(e)}
+    >
+      ${icon}<span>${label}</span>${shareRingEnabled() ? ringTemplate : nothing}
+    </button>`;
+  }
+
+  private renderRow(): TemplateResult {
+    return html`<div
+      class="flex flex-wrap gap-2 ${this.centered ? "justify-center" : ""}"
+    >
+      ${useNativeShare()
+        ? this.button(
+            "native",
+            shareIcon,
+            translateText("player_profile.share_native"),
+            () => void this.nativeShare(),
+          )
+        : ACTIONS.map((a) =>
+            this.button(a.action, a.icon, translateText(a.labelKey), () =>
+              this.run(a.action),
+            ),
+          )}
+    </div>`;
+  }
+
+  render() {
+    if (this.url === "") return nothing;
+    return html`
+      ${this.layout === "menu" ? this.renderMenu() : this.renderRow()}
+      <span class="sr-only" role="status" aria-live="polite"
+        >${this.announcement}</span
+      >
+    `;
+  }
+}
diff --git a/src/client/hud/layers/WinModal.ts b/src/client/hud/layers/WinModal.ts
index d20444e8257..57feb567ca7 100644
--- a/src/client/hud/layers/WinModal.ts
+++ b/src/client/hud/layers/WinModal.ts
@@ -18,6 +18,7 @@ import "../../components/CosmeticCard";
 import { cosmeticSelectionLabel } from "../../components/CosmeticPresentation";
 import type { GameXpPanelState } from "../../components/GameXpPanel";
 import type { LegendCeremony } from "../../components/LegendCeremony";
+import "../../components/ProfileShare";
 import "../../components/PurchaseButton";
 import "../../components/SteamWishlist";
 import { Controller } from "../../Controller";
@@ -28,6 +29,12 @@ import {
 } from "../../Cosmetics";
 import { crazyGamesSDK } from "../../CrazyGamesSDK";
 import { isDesktopShell } from "../../DesktopShell";
+import {
+  gameShareMoment,
+  momentShareLabel,
+  momentShareText,
+  momentShareUrl,
+} from "../../MomentShare";
 import { Platform } from "../../Platform";
 import { MAX_PRESTIGE, reachedLegendThisGame } from "../../Progression";
 import { resolveXpAccount } from "../../ProgressionAccount";
@@ -79,6 +86,14 @@ export class WinModal extends LitElement implements Controller {
   // Polling starts once, at the end of the game.
   private xpPolling = false;
   private xpAbort: AbortController | null = null;
+  // The XP result the panel has finished revealing (or skipped to the end
+  // of): the share button waits for it.
+  @state()
+  private xpSettled: GameXpPanelState | null = null;
+  // The signed-in player's public ID, for the share link. Empty when signed
+  // out (or unknown): no share button.
+  @state()
+  private sharePublicId = "";
   // Whose XP the section shows: the Legend ceremony plays once per account.
   private xpPublicId: string | null = null;
   // The Legend ceremony, fetched only for a player who could become a Legend
@@ -116,20 +131,24 @@ export class WinModal extends LitElement implements Controller {
           <game-xp-panel
             .view=${this.xpView}
             .onScreen=${this.isVisible}
+            @xp-reveal-settled=${(e: CustomEvent<GameXpPanelState>) =>
+              (this.xpSettled = e.detail)}
             .gameType=${this.game?.config().gameConfig().gameType ?? null}
             @xp-legend=${this.onXpLegend}
           ></game-xp-panel>
           ${this.innerHtml()}
         </div>
         <!-- Leaving is the quieter action, on the left; staying in the game
-             is the main one, on the right. -->
-        <div class="mt-4 flex justify-between gap-2.5 shrink-0">
+             is the main one, on the right. Sharing a milestone sits between
+             them, or on its own row above where three don't fit. -->
+        <div class="mt-4 flex flex-wrap justify-between gap-2.5 shrink-0">
           ${this.actionButton(
             "quiet",
             translateText("win_modal.exit"),
             () => this._handleExit(),
             "exit",
           )}
+          ${this.renderShare()}
           ${this.isRankedGame
             ? this.actionButton(
                 "main",
@@ -169,7 +188,11 @@ export class WinModal extends LitElement implements Controller {
     if (ceremony === null) return;
     e.preventDefault();
     legend.markLegendCeremonySeen(publicId);
-    ceremony.show({ lifetimeXp: e.detail.after.lifetimeXp, at: new Date() });
+    ceremony.show({
+      lifetimeXp: e.detail.after.lifetimeXp,
+      at: new Date(),
+      publicId,
+    });
   };
 
   // Fetches the Legend ceremony ahead of its moment: once the account is
@@ -224,6 +247,33 @@ export class WinModal extends LitElement implements Controller {
     </button>`;
   }
 
+  // Sharing a milestone or becoming a Legend, once the reveal has shown it.
+  // Only for the server's result (gameShareMoment), and only for a signed-in
+  // player with a profile to link to.
+  private renderShare(): TemplateResult | null {
+    if (this.sharePublicId === "" || this.xpSettled !== this.xpView) {
+      return null;
+    }
+    const moment = gameShareMoment(this.xpView);
+    if (moment === null || moment.kind === "prestige") return null;
+    const url = momentShareUrl(this.sharePublicId, moment);
+    if (url === null) return null;
+    // Three labelled buttons fit side by side from md up; below that (and
+    // beside a ranked game's requeue button) it takes a row of its own.
+    const placement = this.isRankedGame
+      ? "order-first basis-full"
+      : "order-first basis-full md:order-none md:basis-0 md:flex-1";
+    return html`<profile-share
+      data-win-share
+      class="flex ${placement}"
+      layout="menu"
+      .label=${momentShareLabel(moment)}
+      .url=${url}
+      .text=${momentShareText(moment)}
+      triggerClass="win-action win-action-quiet w-full"
+    ></profile-share>`;
+  }
+
   private renderActionStyles(): TemplateResult {
     return html`<style>
       .win-action {
@@ -540,6 +590,7 @@ export class WinModal extends LitElement implements Controller {
       // before a first scored game); absent means off: no section at all.
       const progress = account.me.player.progress;
       if (progress === undefined) return;
+      this.sharePublicId = account.me.player.publicId;
       this.xpPublicId = account.me.player.publicId ?? null;
       if (!progress.legend) void this.preloadIfLastRun(progress.prestige);
       // The game may have ended while this was resolving; the end-of-game
diff --git a/src/client/utilities/PlayerProfileUrl.ts b/src/client/utilities/PlayerProfileUrl.ts
index 9663aca214b..1c8214dfe95 100644
--- a/src/client/utilities/PlayerProfileUrl.ts
+++ b/src/client/utilities/PlayerProfileUrl.ts
@@ -1,17 +1,58 @@
 import { ClientEnv } from "../ClientEnv";
 
+// The profile's tabs, as `?tab=` on a profile link names them.
+export const PLAYER_PROFILE_TABS: readonly string[] = [
+  "stats",
+  "games",
+  "clans",
+  "progression",
+];
+
+// Public ids are short url-safe tokens (the API stores at most 22
+// characters). Anything else in a profile path is not a link to a player.
+const PUBLIC_ID = /^[A-Za-z0-9_-]{1,22}$/;
+
+// `/player/<id>`, with an optional trailing slash, behind the optional
+// prefixes any page path can carry: `/v/<commit>` (a version's own page) and
+// `/w<n>` (a game server's worker).
+const PROFILE_PATH = /^(?:\/v\/[^/]+)?(?:\/w\d+)?\/player\/([^/]+)\/?$/;
+
 /**
- * Build a shareable profile URL for a publicId.
+ * Build a shareable profile URL for a publicId: `https://<site>/player/<id>`,
+ * the canonical link the site unfurls into a profile card.
  *
  * Its own module so callers that only need the link — the nav profile menu's
  * copy action, say — don't pull in the whole profile modal.
  *
- * The base comes from ClientEnv.shareBase(), not window.location, because this
- * link is copied to the clipboard to be sent to someone else: under the desktop
- * shell the document lives on `app://openfront/index.html`, which is a URL only
- * that Electron app can resolve (OPE bug: the Steam build copied
+ * The origin comes from ClientEnv.shareOrigin(), not window.location, because
+ * this link is copied to the clipboard to be sent to someone else: under the
+ * desktop shell the document lives on `app://openfront/index.html`, which is
+ * a URL only that Electron app can resolve (OPE bug: the Steam build copied
  * `app://openfront/index.html#modal=profile&publicID=…`).
  */
 export function playerProfileUrl(publicId: string): string {
-  return `${ClientEnv.shareBase()}#modal=profile&publicID=${encodeURIComponent(publicId)}`;
+  return `${ClientEnv.shareOrigin()}/player/${encodeURIComponent(publicId)}`;
+}
+
+/** The publicId a profile path names, or null for any other path. */
+export function parsePlayerProfilePath(pathname: string): string | null {
+  const match = PROFILE_PATH.exec(pathname);
+  if (match === null || !PUBLIC_ID.test(match[1])) return null;
+  return match[1];
+}
+
+/**
+ * The profile a page URL opens, as the profile modal's open() args: the
+ * publicId from the path, and the tab from `?tab=` when it names one.
+ */
+export function playerProfileRouteArgs(location: {
+  pathname: string;
+  search: string;
+}): { publicID: string; tab?: string } | null {
+  const publicID = parsePlayerProfilePath(location.pathname);
+  if (publicID === null) return null;
+  const tab = new URLSearchParams(location.search).get("tab");
+  return tab !== null && PLAYER_PROFILE_TABS.includes(tab)
+    ? { publicID, tab }
+    : { publicID };
 }
diff --git a/src/server/PlayerProfileRoute.ts b/src/server/PlayerProfileRoute.ts
new file mode 100644
index 00000000000..f9b1ed73aad
--- /dev/null
+++ b/src/server/PlayerProfileRoute.ts
@@ -0,0 +1,36 @@
+import type { Express } from "express";
+import path from "path";
+import type { Logger } from "winston";
+import { renderAppShell } from "./RenderHtml";
+
+/**
+ * Serve the app shell at `/player/<publicId>`, the canonical profile link: the
+ * client opens that player's profile on load (see playerProfileUrl).
+ *
+ * In production the site Worker answers these paths, and the master's SPA
+ * fallback already answers a bare `/player/<id>` here. This is for the
+ * worker-prefixed form (`/w<n>/player/<id>`, routed to a worker by nginx and
+ * stripped of its prefix before routing), so a standalone or dev deployment
+ * opens a profile link the same way production does. The id isn't checked:
+ * the client shows its own not-found state for a player that doesn't exist.
+ */
+export function registerPlayerProfileRoute(opts: {
+  app: Express;
+  log: Logger;
+  baseDir: string;
+}) {
+  const { app, log, baseDir } = opts;
+  const htmlPath = path.join(baseDir, "../../static/index.html");
+
+  // Express matches a trailing slash too (non-strict routing).
+  app.get("/player/:publicId", async (_req, res) => {
+    try {
+      await renderAppShell(res, htmlPath);
+    } catch (error) {
+      log.error("failed to render the app shell for a profile link", {
+        error,
+      });
+      res.status(500).send("Internal Server Error");
+    }
+  });
+}
diff --git a/src/server/Worker.ts b/src/server/Worker.ts
index 50440cc40ae..505bc89cea9 100644
--- a/src/server/Worker.ts
+++ b/src/server/Worker.ts
@@ -42,6 +42,7 @@ import { getUserMe, userMeFailureClose, verifyClientToken } from "./jwt";
 import { levelBadgeForPlayer } from "./LevelBadge";
 import { payForLobbyQueue, queueListedLobby } from "./LobbyQueuePayment";
 import { logger } from "./Logger";
+import { registerPlayerProfileRoute } from "./PlayerProfileRoute";
 import { resolveVerifiedJoin } from "./Privilege";
 
 import { MapPlaylist } from "./MapPlaylist";
@@ -479,6 +480,8 @@ export async function startWorker() {
     baseDir: __dirname,
   });
 
+  registerPlayerProfileRoute({ app, log, baseDir: __dirname });
+
   registerAdminBotRoutes({ app, gm, workerId, log });
 
   // WebSocket handling
diff --git a/tests/client/AccountGameStatsNavigation.test.ts b/tests/client/AccountGameStatsNavigation.test.ts
index c13dd512076..343fd2c4ecb 100644
--- a/tests/client/AccountGameStatsNavigation.test.ts
+++ b/tests/client/AccountGameStatsNavigation.test.ts
@@ -69,6 +69,7 @@ vi.mock("src/client/ClientEnv", () => ({
     workerPath: vi.fn(() => "w0"),
     // The profile header's copy-link button builds its URL from this; the web
     // answer is the document itself (see deriveShareBase).
+    shareOrigin: vi.fn(() => window.location.origin),
     shareBase: vi.fn(
       () => `${window.location.origin}${window.location.pathname}`,
     ),
diff --git a/tests/client/LegendCeremony.test.ts b/tests/client/LegendCeremony.test.ts
index 96ea71b0b31..a7cda32b963 100644
--- a/tests/client/LegendCeremony.test.ts
+++ b/tests/client/LegendCeremony.test.ts
@@ -12,12 +12,18 @@ import {
   legendCeremonySeen,
   markLegendCeremonySeen,
 } from "../../src/client/components/LegendCeremony";
+import type { ProfileShare } from "../../src/client/components/ProfileShare";
+import { playerProfileUrl } from "../../src/client/utilities/PlayerProfileUrl";
 
 if (!customElements.get("legend-ceremony")) {
   customElements.define("legend-ceremony", LegendCeremony);
 }
 
-const MOMENT = { lifetimeXp: 2106720, at: new Date("2026-10-03T12:00:00Z") };
+const MOMENT = {
+  lifetimeXp: 2106720,
+  at: new Date("2026-10-03T12:00:00Z"),
+  publicId: "wonder01",
+};
 
 describe("<legend-ceremony>", () => {
   let ceremony: LegendCeremony;
@@ -198,6 +204,104 @@ describe("<legend-ceremony>", () => {
     expect(q(".lc-flash")).toBeNull();
   });
 
+  describe("the share row", () => {
+    const share = () => q("[data-legend-share]");
+    const shareEl = () => q<ProfileShare>("[data-legend-share] profile-share");
+
+    it("comes in at the end, between the line and Continue", async () => {
+      ceremony.show(MOMENT);
+      await settle(LEGEND_CEREMONY_MS - 1);
+      expect(beat()).toBe("line");
+      expect(share()).toBeNull();
+      await settle(1);
+      expect(beat()).toBe("done");
+      const row = share()!;
+      expect(row).not.toBeNull();
+      const line = q("[data-legend-line]")!;
+      const cont = q("[data-legend-continue]")!;
+      expect(
+        line.compareDocumentPosition(row) & Node.DOCUMENT_POSITION_FOLLOWING,
+      ).toBeTruthy();
+      expect(
+        row.compareDocumentPosition(cont) & Node.DOCUMENT_POSITION_FOLLOWING,
+      ).toBeTruthy();
+      // Simply there: no rise or fade of its own.
+      expect(row.classList.contains("lc-rise")).toBe(false);
+      expect(row.classList.contains("lc-final-in")).toBe(false);
+      // Continue still takes the focus.
+      expect(document.activeElement).toBe(cont);
+    });
+
+    it("shares the player's Legend moment, solid and centred", async () => {
+      ceremony.show(MOMENT);
+      await settle(LEGEND_CEREMONY_MS);
+      const el = shareEl()!;
+      expect(el.url).toBe(`${playerProfileUrl("wonder01")}?moment=legend`);
+      expect(el.text).toBe("progression.share_text_legend");
+      expect(el.solid).toBe(true);
+      expect(el.centered).toBe(true);
+      await el.updateComplete;
+      expect(el.querySelectorAll("button[data-share]").length).toBeGreaterThan(
+        0,
+      );
+    });
+
+    it("is there at once when skipped", async () => {
+      ceremony.show(MOMENT);
+      await settle(1000);
+      root()!.click();
+      await settle();
+      expect(share()).not.toBeNull();
+    });
+
+    it("keeps its clicks from the ceremony", async () => {
+      const closed = vi.fn();
+      ceremony.addEventListener("legend-ceremony-closed", closed);
+      ceremony.show(MOMENT);
+      await settle(LEGEND_CEREMONY_MS);
+      const reached = vi.fn();
+      root()!.addEventListener("click", reached);
+      share()!.click();
+      await settle();
+      expect(reached).not.toHaveBeenCalled();
+      expect(root()).not.toBeNull();
+      expect(closed).not.toHaveBeenCalled();
+    });
+
+    it("isn't there without a public ID", async () => {
+      ceremony.show({ ...MOMENT, publicId: "" });
+      await settle(LEGEND_CEREMONY_MS);
+      expect(beat()).toBe("done");
+      expect(share()).toBeNull();
+      expect(q("[data-legend-continue]")).not.toBeNull();
+    });
+
+    it("Tab moves between the share buttons and Continue", async () => {
+      ceremony.show(MOMENT);
+      await settle(LEGEND_CEREMONY_MS);
+      await shareEl()!.updateComplete;
+      const buttons = [
+        ...root()!.querySelectorAll<HTMLButtonElement>("button"),
+      ];
+      const cont = q<HTMLButtonElement>("[data-legend-continue]")!;
+      expect(buttons[buttons.length - 1]).toBe(cont);
+      expect(buttons.length).toBeGreaterThan(1);
+      const tab = (shiftKey = false) =>
+        root()!.dispatchEvent(
+          new KeyboardEvent("keydown", { key: "Tab", shiftKey, bubbles: true }),
+        );
+      expect(document.activeElement).toBe(cont);
+      tab();
+      expect(document.activeElement).toBe(buttons[0]);
+      tab(true);
+      expect(document.activeElement).toBe(cont);
+      tab(true);
+      expect(document.activeElement).toBe(buttons[buttons.length - 2]);
+      // Still open: Tab never closes or leaves it.
+      expect(root()).not.toBeNull();
+    });
+  });
+
   it("ignores a second show while it's up", async () => {
     ceremony.show(MOMENT);
     await settle(1000);
diff --git a/tests/client/MomentShare.test.ts b/tests/client/MomentShare.test.ts
new file mode 100644
index 00000000000..e480d894469
--- /dev/null
+++ b/tests/client/MomentShare.test.ts
@@ -0,0 +1,176 @@
+import { describe, expect, it, vi } from "vitest";
+
+vi.mock("../../src/client/Utils", () => ({
+  translateText: (key: string, params?: Record<string, string | number>) =>
+    params ? `${key}:${JSON.stringify(params)}` : key,
+}));
+
+import type { GameXpPanelState } from "../../src/client/components/GameXpPanel";
+import {
+  gameShareMoment,
+  momentShareLabel,
+  momentShareText,
+  momentShareUrl,
+  momentSlug,
+} from "../../src/client/MomentShare";
+import { playerProfileUrl } from "../../src/client/utilities/PlayerProfileUrl";
+
+// A server result for a game at prestige 3 that reached `levels`.
+function result(
+  levels: number[],
+  opts: { legend?: boolean; prestige?: number } = {},
+): GameXpPanelState {
+  const prestige = opts.prestige ?? 3;
+  const last = levels.length > 0 ? levels[levels.length - 1] : 46;
+  return {
+    kind: "result",
+    data: {
+      gameId: "wndrG4me1",
+      eligible: true,
+      breakdown: {
+        leftEarly: false,
+        played: 50,
+        time: 280,
+        placement: 90,
+        win: 300,
+        firstGame: 200,
+        feats: 0,
+        subtotal: 920,
+        gamePermille: 1000,
+        subscriberPermille: 1250,
+        total: 1150,
+      },
+      before: { prestige, level: 46, xpInLevel: 1550, xpForNext: 2210 },
+      after: {
+        prestige,
+        level: last,
+        xpInLevel: 444,
+        xpForNext: 2260,
+        lifetimeXp: 125400,
+        legend: opts.legend ?? false,
+        canPrestige: false,
+      },
+      levelsReached: levels.map((level) => ({ prestige, level })),
+    },
+  };
+}
+
+describe("gameShareMoment", () => {
+  it("shares a milestone level the server says was reached", () => {
+    expect(gameShareMoment(result([49, 50]))).toEqual({
+      kind: "level",
+      level: 50,
+    });
+  });
+
+  it("shares the highest of several milestones reached in one game", () => {
+    expect(gameShareMoment(result([9, 10, 11, 24, 25, 26]))).toEqual({
+      kind: "level",
+      level: 25,
+    });
+  });
+
+  it("shares nothing for an ordinary level-up or no level-up", () => {
+    expect(gameShareMoment(result([47]))).toBeNull();
+    expect(gameShareMoment(result([]))).toBeNull();
+  });
+
+  it("puts becoming a Legend ahead of the level", () => {
+    const view = result([100], { legend: true, prestige: 10 });
+    expect(gameShareMoment(view)).toEqual({ kind: "legend" });
+  });
+
+  it("doesn't call it a Legend moment for a player who already was one", () => {
+    // Legend already, no level 100 this game: nothing new to share.
+    expect(gameShareMoment(result([], { legend: true }))).toBeNull();
+  });
+
+  it("ignores levels at another prestige", () => {
+    const view = result([50]);
+    if (view.kind !== "result" || !view.data.eligible) throw new Error();
+    view.data.levelsReached = [{ prestige: 4, level: 50 }];
+    expect(gameShareMoment(view)).toBeNull();
+  });
+
+  it("only goes by the server's result, never anything provisional", () => {
+    const confirmed = result([50]);
+    if (confirmed.kind !== "result") throw new Error();
+    // A provisional figure carries the same data under another kind.
+    const provisional = {
+      kind: "provisional",
+      data: confirmed.data,
+    } as unknown as GameXpPanelState;
+    expect(gameShareMoment(provisional)).toBeNull();
+    for (const kind of [
+      "hidden",
+      "signed_out",
+      "awaiting_end",
+      "calculating",
+    ] as const) {
+      expect(gameShareMoment({ kind })).toBeNull();
+    }
+    expect(
+      gameShareMoment({
+        kind: "result",
+        data: { gameId: "g", eligible: false, reason: "too_short" },
+      }),
+    ).toBeNull();
+  });
+});
+
+describe("moment links and lines", () => {
+  it("names the moment in the profile link", () => {
+    expect(momentSlug({ kind: "level", level: 50 })).toBe("level50");
+    expect(momentSlug({ kind: "legend" })).toBe("legend");
+    expect(momentSlug({ kind: "prestige", rank: 3 })).toBe("prestige3");
+    expect(momentShareUrl("wonder01", { kind: "level", level: 50 })).toBe(
+      `${playerProfileUrl("wonder01")}?moment=level50`,
+    );
+    expect(momentShareUrl("wonder01", { kind: "legend" })).toMatch(
+      /\/player\/wonder01\?moment=legend$/,
+    );
+    expect(momentShareUrl("wonder01", { kind: "prestige", rank: 3 })).toMatch(
+      /\/player\/wonder01\?moment=prestige3$/,
+    );
+  });
+
+  // The card route answers only level 2..100 and prestige 1..10 (anything
+  // else is a 400, unfurling with no image): a slug is in that range or
+  // refused, and a refused one has no link.
+  it.each([
+    [{ kind: "level", level: 1 }, null],
+    [{ kind: "level", level: 2 }, "level2"],
+    [{ kind: "level", level: 100 }, "level100"],
+    [{ kind: "level", level: 101 }, null],
+    [{ kind: "level", level: 50.5 }, null],
+    [{ kind: "level", level: Number.NaN }, null],
+    [{ kind: "prestige", rank: 0 }, null],
+    [{ kind: "prestige", rank: 1 }, "prestige1"],
+    [{ kind: "prestige", rank: 10 }, "prestige10"],
+    [{ kind: "prestige", rank: 11 }, null],
+    [{ kind: "prestige", rank: 1.5 }, null],
+  ] as const)("slugs %o as %s", (moment, slug) => {
+    expect(momentSlug(moment)).toBe(slug);
+    expect(momentShareUrl("wonder01", moment)).toBe(
+      slug === null ? null : `${playerProfileUrl("wonder01")}?moment=${slug}`,
+    );
+  });
+
+  it("words the line and the button for each moment", () => {
+    expect(momentShareText({ kind: "level", level: 50 })).toBe(
+      'progression.share_text_level:{"level":50}',
+    );
+    expect(momentShareText({ kind: "legend" })).toBe(
+      "progression.share_text_legend",
+    );
+    expect(momentShareText({ kind: "prestige", rank: 3 })).toBe(
+      'prestige.share_text:{"rank":3}',
+    );
+    expect(momentShareLabel({ kind: "level", level: 50 })).toBe(
+      'progression.share_moment_level:{"level":50}',
+    );
+    expect(momentShareLabel({ kind: "legend" })).toBe(
+      "progression.share_moment_legend",
+    );
+  });
+});
diff --git a/tests/client/NavAccountMenu.test.ts b/tests/client/NavAccountMenu.test.ts
index e7515845b25..356fa610b46 100644
--- a/tests/client/NavAccountMenu.test.ts
+++ b/tests/client/NavAccountMenu.test.ts
@@ -159,9 +159,7 @@ describe("nav-account-menu", () => {
     await new Promise((r) => setTimeout(r, 0));
 
     expect(copyToClipboard).toHaveBeenCalledTimes(1);
-    expect(vi.mocked(copyToClipboard).mock.calls[0][0]).toContain(
-      "modal=profile&publicID=p",
-    );
+    expect(vi.mocked(copyToClipboard).mock.calls[0][0]).toContain("/player/p");
     expect(showToast).toHaveBeenCalledWith("common.copied", "green");
 
     // No publicId (older backend / unresolved player) — nothing to share.
diff --git a/tests/client/PlayerProfileClansTab.test.ts b/tests/client/PlayerProfileClansTab.test.ts
index e499c5d1e47..e89e46b255a 100644
--- a/tests/client/PlayerProfileClansTab.test.ts
+++ b/tests/client/PlayerProfileClansTab.test.ts
@@ -29,11 +29,17 @@ vi.mock("../../src/client/Api", () => ({
   })),
 }));
 
+// The visitor banner asks who is viewing; these tests don't sign anyone in.
+vi.mock("../../src/client/ProgressionAccount", () => ({
+  resolveXpAccount: vi.fn(async () => ({ kind: "unknown" })),
+}));
+
 vi.mock("src/client/ClientEnv", () => ({
   ClientEnv: {
     workerPath: vi.fn(() => "w0"),
     // The profile header's copy-link button builds its URL from this; the web
     // answer is the document itself (see deriveShareBase).
+    shareOrigin: vi.fn(() => window.location.origin),
     shareBase: vi.fn(
       () => `${window.location.origin}${window.location.pathname}`,
     ),
@@ -383,7 +389,7 @@ describe("Player profile Clans tab", () => {
     await openClansTab();
 
     await waitForModal(modal, () => {
-      expect(modal.textContent).toContain("player_profile.not_found");
+      expect(modal.textContent).toContain("player_profile.not_found_title");
     });
     // Must not read as "in no clans".
     expect(modal.textContent).not.toContain("player_profile.no_clans");
diff --git a/tests/client/PlayerProfileModal.test.ts b/tests/client/PlayerProfileModal.test.ts
index b6c3685c8c0..55f97ddd0fb 100644
--- a/tests/client/PlayerProfileModal.test.ts
+++ b/tests/client/PlayerProfileModal.test.ts
@@ -20,6 +20,11 @@ vi.mock("../../src/client/Utils", () => ({
   copyToClipboard: copyToClipboardMock,
 }));
 
+// The visitor banner asks who is viewing; these tests don't sign anyone in.
+vi.mock("../../src/client/ProgressionAccount", () => ({
+  resolveXpAccount: vi.fn(async () => ({ kind: "unknown" })),
+}));
+
 vi.mock("../../src/client/Api", () => ({
   fetchPublicPlayerProfile: fetchPublicPlayerProfileMock,
 }));
@@ -141,7 +146,7 @@ describe("public player profile route", () => {
       await modal.updateComplete;
       expect(modal.isOpen()).toBe(true);
       expect(modal.querySelector("player-stats-tree-view")).toBeNull();
-      expect(modal.textContent).toContain("player_profile.not_found");
+      expect(modal.textContent).toContain("player_profile.not_found_title");
     });
     expect(fetchPublicPlayerProfileMock).toHaveBeenCalledWith("missing");
   });
@@ -154,7 +159,7 @@ describe("public player profile route", () => {
     await vi.waitFor(async () => {
       await modal.updateComplete;
       expect(modal.isOpen()).toBe(true);
-      expect(modal.textContent).toContain("player_profile.not_found");
+      expect(modal.textContent).toContain("player_profile.not_found_title");
     });
     expect(fetchPublicPlayerProfileMock).not.toHaveBeenCalled();
   });
diff --git a/tests/client/PlayerProfilePage.test.ts b/tests/client/PlayerProfilePage.test.ts
new file mode 100644
index 00000000000..bc2eceb775b
--- /dev/null
+++ b/tests/client/PlayerProfilePage.test.ts
@@ -0,0 +1,409 @@
+import {
+  afterAll,
+  afterEach,
+  beforeAll,
+  beforeEach,
+  describe,
+  expect,
+  it,
+  vi,
+} from "vitest";
+
+const fetchPublicPlayerProfileMock = vi.hoisted(() => vi.fn());
+const viewer = vi.hoisted(() => ({ kind: "unknown" as string }));
+
+vi.mock("../../src/client/Utils", () => ({
+  translateText: vi.fn((key: string) => key),
+  copyToClipboard: vi.fn(async () => undefined),
+  showToast: vi.fn(),
+}));
+
+vi.mock("../../src/client/Api", () => ({
+  fetchPublicPlayerProfile: fetchPublicPlayerProfileMock,
+  fetchPublicPlayerGames: vi.fn(async () => ({
+    results: [],
+    nextCursor: null,
+  })),
+}));
+
+vi.mock("../../src/client/ProgressionApi", () => ({
+  fetchPublicPlayerProgress: vi.fn(async () => false),
+}));
+
+vi.mock("../../src/client/ProgressionAccount", () => ({
+  resolveXpAccount: vi.fn(async () => ({ kind: viewer.kind })),
+}));
+
+vi.mock(
+  "../../src/client/components/baseComponents/stats/PlayerStatsTree",
+  () => ({}),
+);
+vi.mock(
+  "../../src/client/components/baseComponents/stats/PlayerGameHistoryView",
+  () => ({}),
+);
+
+import { BaseModal } from "../../src/client/components/BaseModal";
+import { modalRouter } from "../../src/client/ModalRouter";
+import { initNavigation } from "../../src/client/Navigation";
+import { PlayerProfileModal } from "../../src/client/PlayerProfileModal";
+import { playerProfileRouteArgs } from "../../src/client/utilities/PlayerProfileUrl";
+
+type ModalShell = HTMLElement & { updateComplete: Promise<boolean> };
+
+// Stand-ins for other router-managed modals: a popup (like account settings,
+// which the nav menu opens by setting the hash) and an inline page.
+class TestPopupModal extends BaseModal {
+  protected routerName = "test-popup";
+}
+class TestPageModal extends BaseModal {
+  protected routerName = "test-page";
+}
+
+const profile = {
+  createdAt: "2026-01-01T00:00:00.000Z",
+  username: "Wonder",
+  stats: { Public: {} },
+  clans: [],
+};
+
+describe("public profile page", () => {
+  let modal: PlayerProfileModal;
+  let playPage: HTMLElement;
+  let leaderboard: HTMLElement & { open: () => void };
+  let leaderboardOpens: number;
+
+  async function settle(assertion: () => void): Promise<void> {
+    await vi.waitFor(async () => {
+      await modal.updateComplete;
+      const shell = modal.querySelector("o-modal") as ModalShell | null;
+      await shell?.updateComplete;
+      assertion();
+    });
+  }
+
+  const url = () =>
+    window.location.pathname + window.location.search + window.location.hash;
+
+  beforeAll(() => {
+    playPage = document.createElement("div");
+    playPage.id = "page-play";
+    document.body.appendChild(playPage);
+    initNavigation();
+    modalRouter.register("profile", {
+      tag: "player-profile-modal",
+      pageId: "page-profile",
+    });
+    modalRouter.registerPath("profile", playerProfileRouteArgs);
+    modalRouter.register("test-popup", { tag: "test-popup-modal" });
+    modalRouter.register("test-page", {
+      tag: "test-page-modal",
+      pageId: "page-test",
+    });
+    if (!customElements.get("player-profile-modal")) {
+      customElements.define("player-profile-modal", PlayerProfileModal);
+    }
+    if (!customElements.get("test-popup-modal")) {
+      customElements.define("test-popup-modal", TestPopupModal);
+    }
+    if (!customElements.get("test-page-modal")) {
+      customElements.define("test-page-modal", TestPageModal);
+    }
+  });
+
+  afterAll(() => {
+    playPage.remove();
+  });
+
+  beforeEach(async () => {
+    fetchPublicPlayerProfileMock.mockReset();
+    fetchPublicPlayerProfileMock.mockResolvedValue(profile);
+    viewer.kind = "unknown";
+    history.replaceState(null, "", "/");
+
+    leaderboardOpens = 0;
+    leaderboard = document.createElement("leaderboard-modal") as HTMLElement & {
+      open: () => void;
+    };
+    leaderboard.open = () => {
+      leaderboardOpens++;
+    };
+    document.body.appendChild(leaderboard);
+
+    modal = document.createElement(
+      "player-profile-modal",
+    ) as PlayerProfileModal;
+    modal.id = "page-profile";
+    modal.setAttribute("inline", "");
+    modal.className = "hidden page-content";
+    document.body.appendChild(modal);
+    await modal.updateComplete;
+  });
+
+  afterEach(() => {
+    window.showPage?.("page-play");
+    modal.remove();
+    leaderboard.remove();
+    history.replaceState(null, "", "/");
+  });
+
+  async function openFromPath(path: string): Promise<void> {
+    history.replaceState(null, "", path);
+    expect(modalRouter.routeFromPath()).toBe(true);
+    await settle(() => expect(modal.isOpen()).toBe(true));
+  }
+
+  describe("opening from a /player/<id> link", () => {
+    it("opens that player's profile and keeps the link in the address bar", async () => {
+      await openFromPath("/player/aB3dE5fX");
+      await settle(() =>
+        expect(modal.querySelector("player-stats-tree-view")).not.toBeNull(),
+      );
+      expect(fetchPublicPlayerProfileMock).toHaveBeenCalledWith("aB3dE5fX");
+      expect(url()).toBe("/player/aB3dE5fX");
+    });
+
+    it("accepts the trailing-slash and worker-prefixed forms", async () => {
+      await openFromPath("/w0/player/aB3dE5fX/");
+      expect(fetchPublicPlayerProfileMock).toHaveBeenCalledWith("aB3dE5fX");
+    });
+
+    it("ignores a path that isn't a profile link", () => {
+      history.replaceState(null, "", "/player/not!an!id");
+      expect(modalRouter.routeFromPath()).toBe(false);
+      history.replaceState(null, "", "/news");
+      expect(modalRouter.routeFromPath()).toBe(false);
+      expect(modal.isOpen()).toBe(false);
+    });
+
+    it("opens on the tab ?tab= names, and writes tab changes back to it", async () => {
+      await openFromPath("/player/aB3dE5fX?tab=clans");
+      await settle(() =>
+        expect(modal.textContent).toContain("player_profile.no_clans"),
+      );
+
+      modal.setActiveTab("games");
+      expect(url()).toBe("/player/aB3dE5fX?tab=games");
+      expect(window.location.hash).toBe("");
+    });
+
+    it("goes home on Back and resets the URL so a reload doesn't reopen it", async () => {
+      await openFromPath("/player/aB3dE5fX");
+      (modal.querySelector('[slot="header"] button') as HTMLElement).click();
+      expect(modal.isOpen()).toBe(false);
+      expect(url()).toBe("/");
+      expect(playPage.classList.contains("hidden")).toBe(false);
+      expect(modalRouter.isPathRouted("profile")).toBe(false);
+    });
+
+    it("goes home on Escape too", async () => {
+      await openFromPath("/player/aB3dE5fX?tab=games");
+      window.dispatchEvent(new KeyboardEvent("keydown", { key: "Escape" }));
+      await vi.waitFor(() => expect(modal.isOpen()).toBe(false));
+      expect(url()).toBe("/");
+    });
+
+    it("hands the URL back to the hash once the profile is reopened in-app", async () => {
+      await openFromPath("/player/aB3dE5fX");
+      modal.close();
+      modal.openFromLeaderboard("other123");
+      expect(url()).toBe("/#modal=profile&publicID=other123");
+    });
+
+    it("hands the URL to another player's profile opened over this one", async () => {
+      await openFromPath("/player/aB3dE5fX?tab=games");
+      fetchPublicPlayerProfileMock.mockResolvedValue(false);
+      // A profile reached from inside the open one (a roster, say).
+      modal.open({ publicID: "other123" });
+      expect(fetchPublicPlayerProfileMock).toHaveBeenLastCalledWith("other123");
+      expect(modalRouter.isPathRouted("profile")).toBe(false);
+      expect(url()).toBe("/#modal=profile&publicID=other123");
+
+      // Tab changes land on the new player's URL, not the old path.
+      modal.setActiveTab("clans");
+      expect(url()).toBe("/#modal=profile&publicID=other123&tab=clans");
+
+      // And the not-found panel doesn't name the old player's link.
+      await settle(() =>
+        expect(modal.querySelector("[data-not-found]")).not.toBeNull(),
+      );
+      expect(modal.querySelector("[data-opened-link]")).toBeNull();
+    });
+
+    it("moves the hash on to another player's profile opened over this one", async () => {
+      modal.openFromLeaderboard("aB3dE5fX");
+      expect(url()).toBe("/#modal=profile&publicID=aB3dE5fX");
+      modal.open({ publicID: "other123", tab: "clans" });
+      expect(url()).toBe("/#modal=profile&publicID=other123&tab=clans");
+    });
+
+    it("leaves the URL alone when the same profile is reopened", async () => {
+      await openFromPath("/player/aB3dE5fX");
+      modal.open({ publicID: "aB3dE5fX", tab: "games" });
+      expect(modalRouter.isPathRouted("profile")).toBe(true);
+      expect(url()).toBe("/player/aB3dE5fX?tab=games");
+    });
+
+    it("still opens from the hash form", async () => {
+      history.replaceState(null, "", "/#modal=profile&publicID=aB3dE5fX");
+      expect(modalRouter.routeFromHash()).toBe(true);
+      await settle(() => expect(modal.isOpen()).toBe(true));
+      expect(fetchPublicPlayerProfileMock).toHaveBeenCalledWith("aB3dE5fX");
+      expect(modalRouter.isPathRouted("profile")).toBe(false);
+    });
+  });
+
+  describe("with another modal opened over it", () => {
+    let popup: TestPopupModal;
+    let page: TestPageModal;
+
+    beforeEach(async () => {
+      popup = document.createElement("test-popup-modal") as TestPopupModal;
+      document.body.appendChild(popup);
+      page = document.createElement("test-page-modal") as TestPageModal;
+      page.id = "page-test";
+      page.setAttribute("inline", "");
+      page.className = "hidden page-content";
+      document.body.appendChild(page);
+      await Promise.all([popup.updateComplete, page.updateComplete]);
+    });
+
+    afterEach(() => {
+      if (popup.isOpen()) popup.close();
+      popup.remove();
+      page.remove();
+    });
+
+    // What the nav menu does: set the hash, which Main hands to the router.
+    async function openFromHash(other: BaseModal, name: string) {
+      window.location.hash = `#modal=${name}`;
+      expect(modalRouter.routeFromHash()).toBe(true);
+      await vi.waitFor(() => expect(other.isOpen()).toBe(true));
+    }
+
+    // Main re-routes the URL on reload, popstate and hashchange.
+    function expectUrlNotToReopenProfile() {
+      expect(modalRouter.isPathRouted("profile")).toBe(false);
+      expect(modalRouter.routeFromPath()).toBe(false);
+      expect(modalRouter.routeFromHash()).toBe(false);
+      expect(modal.isOpen()).toBe(false);
+    }
+
+    it("leaves the profile's link once a hash-opened modal and then the profile close", async () => {
+      await openFromPath("/player/abc12345");
+      await openFromHash(popup, "test-popup");
+      expect(modal.isOpen()).toBe(true);
+      expect(url()).toBe("/#modal=test-popup");
+
+      popup.close();
+      expect(url()).toBe("/");
+      modal.close();
+      expect(url()).toBe("/");
+      expectUrlNotToReopenProfile();
+    });
+
+    it("keeps the other modal's hash when the profile closes first", async () => {
+      await openFromPath("/player/abc12345");
+      await openFromHash(popup, "test-popup");
+
+      modal.close();
+      expect(url()).toBe("/#modal=test-popup");
+      expect(popup.isOpen()).toBe(true);
+
+      popup.close();
+      expect(url()).toBe("/");
+      expectUrlNotToReopenProfile();
+    });
+
+    it("leaves the profile's link when a hash-opened page replaces it", async () => {
+      await openFromPath("/player/abc12345");
+      await openFromHash(page, "test-page");
+      expect(modal.isOpen()).toBe(false);
+      expect(url()).toBe("/#modal=test-page");
+
+      page.close();
+      expect(url()).toBe("/");
+      expectUrlNotToReopenProfile();
+    });
+
+    it("hands the URL to a modal opened in-app, as before", async () => {
+      await openFromPath("/player/abc12345");
+      popup.open();
+      expect(url()).toBe("/#modal=test-popup");
+
+      popup.close();
+      expect(url()).toBe("/");
+      modal.close();
+      expect(url()).toBe("/");
+      expectUrlNotToReopenProfile();
+    });
+  });
+
+  it("offers the canonical link to share", async () => {
+    await openFromPath("/player/aB3dE5fX");
+    await settle(() =>
+      expect(modal.querySelector("profile-share")).not.toBeNull(),
+    );
+    const share = modal.querySelector("profile-share") as HTMLElement & {
+      url: string;
+      name: string;
+    };
+    expect(share.url).toBe(`${window.location.origin}/player/aB3dE5fX`);
+    expect(share.name).toBe("Wonder");
+  });
+
+  describe("not found", () => {
+    it("explains, shows the link that was opened, and offers a way on", async () => {
+      fetchPublicPlayerProfileMock.mockResolvedValue(false);
+      await openFromPath("/player/missing1");
+      await settle(() =>
+        expect(modal.querySelector("[data-not-found]")).not.toBeNull(),
+      );
+      const panel = modal.querySelector("[data-not-found]")!;
+      expect(panel.textContent).toContain("player_profile.not_found_title");
+      expect(panel.textContent).toContain("player_profile.not_found_body");
+      expect(
+        panel.querySelector("[data-opened-link]")?.textContent?.trim(),
+      ).toBe(`${window.location.host}/player/missing1`);
+      expect(panel.querySelector("svg")).not.toBeNull();
+    });
+
+    it("leaves the link out when the profile wasn't opened from one", async () => {
+      fetchPublicPlayerProfileMock.mockResolvedValue(false);
+      modal.openFromLeaderboard("missing1");
+      await settle(() =>
+        expect(modal.querySelector("[data-not-found]")).not.toBeNull(),
+      );
+      expect(modal.querySelector("[data-opened-link]")).toBeNull();
+    });
+
+    it("Play OpenFront goes home", async () => {
+      fetchPublicPlayerProfileMock.mockResolvedValue(false);
+      await openFromPath("/player/missing1");
+      await settle(() =>
+        expect(modal.querySelector('[data-action="play"]')).not.toBeNull(),
+      );
+      (
+        modal.querySelector('[data-action="play"] button') as HTMLElement
+      ).click();
+      expect(modal.isOpen()).toBe(false);
+      expect(url()).toBe("/");
+    });
+
+    it("View leaderboard opens the leaderboard", async () => {
+      fetchPublicPlayerProfileMock.mockResolvedValue(false);
+      await openFromPath("/player/missing1");
+      await settle(() =>
+        expect(
+          modal.querySelector('[data-action="leaderboard"]'),
+        ).not.toBeNull(),
+      );
+      (
+        modal.querySelector('[data-action="leaderboard"] button') as HTMLElement
+      ).click();
+      expect(modal.isOpen()).toBe(false);
+      expect(leaderboardOpens).toBe(1);
+      expect(url()).toBe("/");
+    });
+  });
+});
diff --git a/tests/client/PlayerProfileProgressionTab.test.ts b/tests/client/PlayerProfileProgressionTab.test.ts
index 35e764d5e83..0ea6e55def1 100644
--- a/tests/client/PlayerProfileProgressionTab.test.ts
+++ b/tests/client/PlayerProfileProgressionTab.test.ts
@@ -27,9 +27,15 @@ vi.mock("../../src/client/InGameModal", () => ({
   showInGameAlert: vi.fn(async () => {}),
 }));
 
+// The visitor banner asks who is viewing; these tests don't sign anyone in.
+vi.mock("../../src/client/ProgressionAccount", () => ({
+  resolveXpAccount: vi.fn(async () => ({ kind: "unknown" })),
+}));
+
 vi.mock("src/client/ClientEnv", () => ({
   ClientEnv: {
     workerPath: vi.fn(() => "w0"),
+    shareOrigin: vi.fn(() => window.location.origin),
     shareBase: vi.fn(
       () => `${window.location.origin}${window.location.pathname}`,
     ),
diff --git a/tests/client/PlayerProfileUrl.test.ts b/tests/client/PlayerProfileUrl.test.ts
new file mode 100644
index 00000000000..2a8958da1bd
--- /dev/null
+++ b/tests/client/PlayerProfileUrl.test.ts
@@ -0,0 +1,79 @@
+import { describe, expect, it } from "vitest";
+import {
+  parsePlayerProfilePath,
+  playerProfileRouteArgs,
+} from "../../src/client/utilities/PlayerProfileUrl";
+
+describe("parsePlayerProfilePath", () => {
+  it("reads the id from every form of the profile path", () => {
+    for (const path of [
+      "/player/aB3dE5fX",
+      "/player/aB3dE5fX/",
+      "/w0/player/aB3dE5fX",
+      "/w12/player/aB3dE5fX/",
+      "/v/abc1234/player/aB3dE5fX",
+      "/v/abc1234/w1/player/aB3dE5fX",
+    ]) {
+      expect(parsePlayerProfilePath(path), path).toBe("aB3dE5fX");
+    }
+  });
+
+  it("accepts the url-safe characters ids are made of", () => {
+    expect(parsePlayerProfilePath("/player/a_b-C9")).toBe("a_b-C9");
+  });
+
+  it("ignores other paths and ids that can't be one", () => {
+    for (const path of [
+      "/",
+      "/player",
+      "/player/",
+      "/player/aB3dE5fX/games",
+      "/players/aB3dE5fX",
+      "/x/player/aB3dE5fX",
+      "/wx/player/aB3dE5fX",
+      "/game/aB3dE5fX",
+      "/player/a%2Bb",
+      "/player/<script>",
+      "/player/aaaaaaaaaaaaaaaaaaaaaaa", // 23 characters
+    ]) {
+      expect(parsePlayerProfilePath(path), path).toBeNull();
+    }
+  });
+});
+
+describe("playerProfileRouteArgs", () => {
+  it("opens the profile named by the path", () => {
+    expect(
+      playerProfileRouteArgs({ pathname: "/player/aB3dE5fX", search: "" }),
+    ).toEqual({ publicID: "aB3dE5fX" });
+  });
+
+  it("takes a known tab from ?tab=", () => {
+    for (const tab of ["stats", "games", "clans", "progression"]) {
+      expect(
+        playerProfileRouteArgs({
+          pathname: "/player/aB3dE5fX/",
+          search: `?tab=${tab}`,
+        }),
+      ).toEqual({ publicID: "aB3dE5fX", tab });
+    }
+  });
+
+  it("drops an unknown tab", () => {
+    expect(
+      playerProfileRouteArgs({
+        pathname: "/player/aB3dE5fX",
+        search: "?tab=friends",
+      }),
+    ).toEqual({ publicID: "aB3dE5fX" });
+  });
+
+  it("is null for any other page", () => {
+    expect(
+      playerProfileRouteArgs({ pathname: "/", search: "?tab=stats" }),
+    ).toBeNull();
+    expect(
+      playerProfileRouteArgs({ pathname: "/player/bad!id", search: "" }),
+    ).toBeNull();
+  });
+});
diff --git a/tests/client/PrestigeFlow.test.ts b/tests/client/PrestigeFlow.test.ts
index 261727549a5..24b923dc545 100644
--- a/tests/client/PrestigeFlow.test.ts
+++ b/tests/client/PrestigeFlow.test.ts
@@ -8,9 +8,14 @@ import {
   vi,
 } from "vitest";
 
+const { copyToClipboard } = vi.hoisted(() => ({
+  copyToClipboard: vi.fn(async () => undefined),
+}));
 vi.mock("../../src/client/Utils", () => ({
   translateText: (key: string, params?: Record<string, string | number>) =>
     params ? `${key}:${JSON.stringify(params)}` : key,
+  copyToClipboard,
+  showToast: vi.fn(),
 }));
 vi.mock("../../src/client/ProgressionApi", () => ({
   prestigeMe: vi.fn(),
@@ -35,6 +40,7 @@ import {
   PrestigeFlow,
 } from "../../src/client/components/PrestigeFlow";
 import { ProfileCard } from "../../src/client/components/ProfileCard";
+import { playerProfileUrl } from "../../src/client/utilities/PlayerProfileUrl";
 
 if (!customElements.get("prestige-flow")) {
   customElements.define("prestige-flow", PrestigeFlow);
@@ -852,6 +858,93 @@ describe("<prestige-flow>", () => {
     expect(q("[data-prestige-confirm]")).not.toBeNull();
     expect(q("[data-prestige-ceremony]")).toBeNull();
   });
+  // --- Sharing the new rank ------------------------------------------------
+
+  const shareRow = () => q("[data-prestige-share]");
+
+  async function ceremonyDone(): Promise<void> {
+    flow.celebrate(AT_100, PRESTIGED);
+    await settle(300);
+    q("[data-prestige-ceremony]")!.click();
+    await settle();
+    await (
+      shareRow()?.querySelector("profile-share") as unknown as
+        | { updateComplete: Promise<unknown> }
+        | undefined
+    )?.updateComplete;
+  }
+
+  it("offers to share the new rank between the title and Continue", async () => {
+    flow.publicId = "wonder01";
+    flow.celebrate(AT_100, PRESTIGED);
+    await settle(300);
+    // Not while the ceremony is still playing.
+    expect(shareRow()).toBeNull();
+    q("[data-prestige-ceremony]")!.click();
+    await settle();
+    const row = shareRow()!;
+    expect(row).not.toBeNull();
+    expect(row.previousElementSibling).toBe(q("[data-prestige-title]"));
+    expect(row.nextElementSibling).toBe(q("[data-prestige-continue]"));
+    // Simply there: no rise-in (Continue keeps its own).
+    expect(row.classList.contains("prestige-fade")).toBe(false);
+    const share = row.querySelector("profile-share") as HTMLElement & {
+      url: string;
+      text: string;
+      solid: boolean;
+      updateComplete: Promise<unknown>;
+    };
+    expect(share.url).toBe(`${playerProfileUrl("wonder01")}?moment=prestige4`);
+    expect(share.text).toBe('prestige.share_text:{"rank":4}');
+    // Backed, to read over the honeycomb.
+    expect(share.solid).toBe(true);
+    await share.updateComplete;
+    expect(
+      [...row.querySelectorAll("[data-share]")].map((b) =>
+        b.getAttribute("data-share"),
+      ),
+    ).toEqual(["copy", "x", "discord"]);
+  });
+
+  it("keeps clicks on the share row from the ceremony", async () => {
+    flow.publicId = "wonder01";
+    await ceremonyDone();
+    const ceremony = q("[data-prestige-ceremony]")!;
+    const reached = vi.fn();
+    ceremony.addEventListener("click", reached);
+    const openSpy = vi.spyOn(window, "open").mockImplementation(() => null);
+    q('[data-prestige-share] [data-share="x"]')!.click();
+    q('[data-prestige-share] [data-share="copy"]')!.click();
+    shareRow()!.click();
+    await settle();
+    openSpy.mockRestore();
+    expect(reached).not.toHaveBeenCalled();
+    expect(flow.isOpen).toBe(true);
+    expect(q("[data-prestige-continue]")).not.toBeNull();
+    expect(copyToClipboard).toHaveBeenCalledWith(
+      `${playerProfileUrl("wonder01")}?moment=prestige4`,
+    );
+  });
+
+  it("has no share row without a public ID", async () => {
+    await ceremonyDone();
+    expect(q("[data-prestige-continue]")).not.toBeNull();
+    expect(shareRow()).toBeNull();
+  });
+
+  it("drops the share row for a rank the card route wouldn't draw", async () => {
+    flow.publicId = "wonder01";
+    // A surprising server rank: shared, its link would unfurl with no card.
+    flow.celebrate(AT_100, {
+      ...PRESTIGED,
+      progress: { ...PRESTIGED.progress, prestige: 11 },
+    });
+    await settle(300);
+    q("[data-prestige-ceremony]")!.click();
+    await settle();
+    expect(q("[data-prestige-continue]")).not.toBeNull();
+    expect(shareRow()).toBeNull();
+  });
 });
 
 describe("<profile-card> prestige button", () => {
diff --git a/tests/client/ProfileGameStatsNavigation.test.ts b/tests/client/ProfileGameStatsNavigation.test.ts
index 439b76162b7..365bac0a5c4 100644
--- a/tests/client/ProfileGameStatsNavigation.test.ts
+++ b/tests/client/ProfileGameStatsNavigation.test.ts
@@ -21,11 +21,17 @@ vi.mock("../../src/client/Api", () => ({
   fetchPublicPlayerGames: vi.fn(),
 }));
 
+// The visitor banner asks who is viewing; these tests don't sign anyone in.
+vi.mock("../../src/client/ProgressionAccount", () => ({
+  resolveXpAccount: vi.fn(async () => ({ kind: "unknown" })),
+}));
+
 vi.mock("src/client/ClientEnv", () => ({
   ClientEnv: {
     workerPath: vi.fn(() => "w0"),
     // The profile header's copy-link button builds its URL from this; the web
     // answer is the document itself (see deriveShareBase).
+    shareOrigin: vi.fn(() => window.location.origin),
     shareBase: vi.fn(
       () => `${window.location.origin}${window.location.pathname}`,
     ),
diff --git a/tests/client/ProfileShare.test.ts b/tests/client/ProfileShare.test.ts
new file mode 100644
index 00000000000..3bcecf4404f
--- /dev/null
+++ b/tests/client/ProfileShare.test.ts
@@ -0,0 +1,470 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+
+const copyToClipboardMock = vi.hoisted(() => vi.fn(async () => undefined));
+const showToastMock = vi.hoisted(() => vi.fn());
+const platform = vi.hoisted(() => ({ isTouch: false }));
+
+vi.mock("../../src/client/Utils", () => ({
+  translateText: (key: string, params?: Record<string, string | number>) =>
+    params ? `${key}:${JSON.stringify(params)}` : key,
+  copyToClipboard: copyToClipboardMock,
+  showToast: showToastMock,
+}));
+
+vi.mock("../../src/client/Platform", () => ({ Platform: platform }));
+
+import {
+  discordShareText,
+  ProfileShare,
+  xShareUrl,
+} from "../../src/client/components/ProfileShare";
+
+if (!customElements.get("profile-share")) {
+  customElements.define("profile-share", ProfileShare);
+}
+
+const URL_ = "https://openfront.io/player/aB3dE5fX";
+const LINE = 'player_profile.share_text:{"name":"Wonder & Co"}';
+
+describe("share links", () => {
+  it("builds the X compose URL with the link and line encoded", () => {
+    expect(xShareUrl(URL_, "Wonder & Co's profile #1")).toBe(
+      "https://x.com/intent/post?url=https%3A%2F%2Fopenfront.io%2Fplayer%2FaB3dE5fX&text=Wonder%20%26%20Co's%20profile%20%231",
+    );
+  });
+
+  it("puts the line before the link for Discord", () => {
+    expect(discordShareText(URL_, "Look")).toBe(`Look\n${URL_}`);
+  });
+});
+
+describe("<profile-share>", () => {
+  let el: ProfileShare;
+  let openSpy: ReturnType<typeof vi.spyOn>;
+
+  async function render(): Promise<void> {
+    el = document.createElement("profile-share") as ProfileShare;
+    el.url = URL_;
+    el.name = "Wonder & Co";
+    document.body.appendChild(el);
+    await el.updateComplete;
+  }
+
+  const button = (action: string) =>
+    el.querySelector<HTMLButtonElement>(`[data-share="${action}"]`);
+
+  beforeEach(() => {
+    copyToClipboardMock.mockReset();
+    copyToClipboardMock.mockResolvedValue(undefined);
+    showToastMock.mockReset();
+    platform.isTouch = false;
+    openSpy = vi.spyOn(window, "open").mockImplementation(() => null);
+  });
+
+  afterEach(() => {
+    el?.remove();
+    openSpy.mockRestore();
+    vi.unstubAllGlobals();
+    Reflect.deleteProperty(navigator, "share");
+  });
+
+  it("offers copy, X and Discord on a desktop", async () => {
+    await render();
+    expect(
+      [...el.querySelectorAll("[data-share]")].map((b) =>
+        b.getAttribute("data-share"),
+      ),
+    ).toEqual(["copy", "x", "discord"]);
+    expect(button("copy")?.textContent).toContain(
+      "player_profile.share_copy_link",
+    );
+  });
+
+  it("copies the link, toasts and announces it", async () => {
+    await render();
+    button("copy")!.click();
+    await vi.waitFor(() =>
+      expect(copyToClipboardMock).toHaveBeenCalledWith(URL_),
+    );
+    await vi.waitFor(() =>
+      expect(showToastMock).toHaveBeenCalledWith("common.copied", "green"),
+    );
+    await el.updateComplete;
+    const live = el.querySelector('[aria-live="polite"]');
+    expect(live?.textContent).toBe("common.copied");
+  });
+
+  it("says so when the copy fails", async () => {
+    copyToClipboardMock.mockRejectedValue(new Error("denied"));
+    await render();
+    button("copy")!.click();
+    await vi.waitFor(() =>
+      expect(showToastMock).toHaveBeenCalledWith("common.failed_copy", "red"),
+    );
+  });
+
+  it("opens X's composer in a new tab", async () => {
+    await render();
+    button("x")!.click();
+    expect(openSpy).toHaveBeenCalledWith(
+      xShareUrl(URL_, LINE),
+      "_blank",
+      "noopener,noreferrer",
+    );
+  });
+
+  it("copies the line and link for Discord", async () => {
+    await render();
+    button("discord")!.click();
+    await vi.waitFor(() =>
+      expect(copyToClipboardMock).toHaveBeenCalledWith(`${LINE}\n${URL_}`),
+    );
+  });
+
+  it("uses the native share sheet on a touch device that has one", async () => {
+    platform.isTouch = true;
+    const share = vi.fn(async () => undefined);
+    Object.defineProperty(navigator, "share", {
+      value: share,
+      configurable: true,
+    });
+    await render();
+    expect(el.querySelectorAll("[data-share]")).toHaveLength(1);
+    button("native")!.click();
+    expect(share).toHaveBeenCalledWith({
+      title: "player_profile.title",
+      text: LINE,
+      url: URL_,
+    });
+  });
+
+  it("does nothing when the share sheet is dismissed, and copies when it fails", async () => {
+    platform.isTouch = true;
+    const share = vi
+      .fn()
+      .mockRejectedValueOnce(new DOMException("dismissed", "AbortError"))
+      .mockRejectedValueOnce(new Error("not allowed"));
+    Object.defineProperty(navigator, "share", {
+      value: share,
+      configurable: true,
+    });
+    await render();
+    button("native")!.click();
+    await vi.waitFor(() => expect(share).toHaveBeenCalledTimes(1));
+    await Promise.resolve();
+    expect(copyToClipboardMock).not.toHaveBeenCalled();
+
+    button("native")!.click();
+    await vi.waitFor(() =>
+      expect(copyToClipboardMock).toHaveBeenCalledWith(URL_),
+    );
+  });
+
+  it("keeps the three buttons on a touch device without a share sheet", async () => {
+    platform.isTouch = true;
+    await render();
+    expect(el.querySelectorAll("[data-share]")).toHaveLength(3);
+  });
+});
+
+describe("<profile-share> as a menu, for a moment", () => {
+  const MOMENT_URL = `${URL_}?moment=level50`;
+  const MOMENT_LINE = "I just reached Level 50 on OpenFront!";
+  let el: ProfileShare;
+  let openSpy: ReturnType<typeof vi.spyOn>;
+
+  async function render(): Promise<void> {
+    el = document.createElement("profile-share") as ProfileShare;
+    el.layout = "menu";
+    el.label = "Share Level 50";
+    el.url = MOMENT_URL;
+    el.text = MOMENT_LINE;
+    document.body.appendChild(el);
+    await el.updateComplete;
+  }
+
+  const trigger = () =>
+    el.querySelector<HTMLButtonElement>('[data-share="menu"]')!;
+  const menu = () => el.querySelector<HTMLElement>("[data-share-menu]");
+  const item = (action: string) =>
+    el.querySelector<HTMLButtonElement>(
+      `[data-share-menu] [data-share="${action}"]`,
+    );
+
+  async function open(): Promise<void> {
+    trigger().click();
+    await el.updateComplete;
+  }
+
+  beforeEach(() => {
+    copyToClipboardMock.mockReset();
+    copyToClipboardMock.mockResolvedValue(undefined);
+    platform.isTouch = false;
+    openSpy = vi.spyOn(window, "open").mockImplementation(() => null);
+  });
+
+  afterEach(() => {
+    el?.remove();
+    openSpy.mockRestore();
+    Reflect.deleteProperty(navigator, "share");
+  });
+
+  it("is one labelled button until opened", async () => {
+    await render();
+    expect(el.querySelectorAll("[data-share]")).toHaveLength(1);
+    expect(trigger().textContent).toContain("Share Level 50");
+    expect(trigger().getAttribute("aria-haspopup")).toBe("menu");
+    expect(trigger().getAttribute("aria-expanded")).toBe("false");
+    expect(menu()).toBeNull();
+  });
+
+  it("opens the same three actions as a menu, focusing the first", async () => {
+    await render();
+    await open();
+    expect(trigger().getAttribute("aria-expanded")).toBe("true");
+    expect(menu()?.getAttribute("role")).toBe("menu");
+    const actions = [...menu()!.querySelectorAll("[role=menuitem]")].map((b) =>
+      b.getAttribute("data-share"),
+    );
+    expect(actions).toEqual(["copy", "x", "discord"]);
+    await Promise.resolve();
+    expect(document.activeElement).toBe(item("copy"));
+  });
+
+  it("shares the moment's link and line, then closes", async () => {
+    await render();
+    await open();
+    item("copy")!.click();
+    await el.updateComplete;
+    expect(copyToClipboardMock).toHaveBeenCalledWith(MOMENT_URL);
+    expect(menu()).toBeNull();
+    expect(document.activeElement).toBe(trigger());
+
+    await open();
+    item("x")!.click();
+    expect(openSpy).toHaveBeenCalledWith(
+      xShareUrl(MOMENT_URL, MOMENT_LINE),
+      "_blank",
+      "noopener,noreferrer",
+    );
+
+    await open();
+    item("discord")!.click();
+    await vi.waitFor(() =>
+      expect(copyToClipboardMock).toHaveBeenCalledWith(
+        `${MOMENT_LINE}\n${MOMENT_URL}`,
+      ),
+    );
+  });
+
+  it("closes on Escape, keeping the key from what holds it", async () => {
+    await render();
+    await open();
+    const outer = vi.fn();
+    document.body.addEventListener("keydown", outer);
+    item("copy")!.dispatchEvent(
+      new KeyboardEvent("keydown", { key: "Escape", bubbles: true }),
+    );
+    await el.updateComplete;
+    document.body.removeEventListener("keydown", outer);
+    expect(menu()).toBeNull();
+    expect(outer).not.toHaveBeenCalled();
+    expect(document.activeElement).toBe(trigger());
+  });
+
+  it("moves between the items with the arrow keys", async () => {
+    await render();
+    await open();
+    await Promise.resolve();
+    const key = (k: string) =>
+      (document.activeElement as HTMLElement).dispatchEvent(
+        new KeyboardEvent("keydown", { key: k, bubbles: true }),
+      );
+    key("ArrowDown");
+    expect(document.activeElement).toBe(item("x"));
+    key("End");
+    expect(document.activeElement).toBe(item("discord"));
+    key("ArrowDown");
+    expect(document.activeElement).toBe(item("copy"));
+    key("ArrowUp");
+    expect(document.activeElement).toBe(item("discord"));
+  });
+
+  it("closes on a press outside it", async () => {
+    await render();
+    await open();
+    document.body.dispatchEvent(new Event("pointerdown", { bubbles: true }));
+    await el.updateComplete;
+    expect(menu()).toBeNull();
+  });
+
+  it("opens the share sheet straight away on a touch device", async () => {
+    platform.isTouch = true;
+    const share = vi.fn(async () => undefined);
+    Object.defineProperty(navigator, "share", {
+      value: share,
+      configurable: true,
+    });
+    await render();
+    expect(trigger().hasAttribute("aria-haspopup")).toBe(false);
+    trigger().click();
+    await el.updateComplete;
+    expect(menu()).toBeNull();
+    expect(share).toHaveBeenCalledWith({
+      title: "player_profile.title",
+      text: MOMENT_LINE,
+      url: MOMENT_URL,
+    });
+  });
+});
+
+describe("<profile-share> ring", () => {
+  let el: ProfileShare;
+  // The device, as matchMedia reports it.
+  let media: { fine: boolean; reduced: boolean };
+  // What animate() hands back: the ring's latest animation.
+  let anim: { playState: AnimationPlayState; currentTime: number | null };
+  let animate: ReturnType<typeof vi.fn>;
+
+  async function render(layout: "row" | "menu"): Promise<void> {
+    el = document.createElement("profile-share") as ProfileShare;
+    el.layout = layout;
+    el.label = "Share Level 50";
+    el.url = URL_;
+    el.triggerClass = "win-action win-action-quiet w-full";
+    document.body.appendChild(el);
+    await el.updateComplete;
+  }
+
+  const trigger = () =>
+    el.querySelector<HTMLButtonElement>('[data-share="menu"]')!;
+  const rings = () => [...el.querySelectorAll("[data-share-ring]")];
+  const hover = (target: Element, pointerType = "mouse") =>
+    target.dispatchEvent(new PointerEvent("pointerenter", { pointerType }));
+
+  beforeEach(() => {
+    platform.isTouch = false;
+    media = { fine: true, reduced: false };
+    vi.stubGlobal("matchMedia", (query: string) => ({
+      media: query,
+      matches: query.includes("prefers-reduced-motion")
+        ? media.reduced
+        : query.includes("pointer: fine")
+          ? media.fine
+          : false,
+    }));
+    anim = { playState: "running", currentTime: 0 };
+    animate = vi.fn(() => anim);
+    Object.defineProperty(HTMLElement.prototype, "animate", {
+      value: animate,
+      configurable: true,
+      writable: true,
+    });
+  });
+
+  afterEach(() => {
+    el?.remove();
+    vi.unstubAllGlobals();
+    Reflect.deleteProperty(HTMLElement.prototype, "animate");
+  });
+
+  it("renders its own ring beside the menu's trigger, not on it", async () => {
+    await render("menu");
+    const [ring] = rings();
+    expect(rings()).toHaveLength(1);
+    expect(ring.getAttribute("aria-hidden")).toBe("true");
+    // In the trigger's wrapper (the trigger clips its own content), sized
+    // to it: 4px outside, 2px thick.
+    expect(ring.parentElement).toBe(trigger().parentElement);
+    expect(trigger().contains(ring)).toBe(false);
+    expect(ring.className).toMatch(/\babsolute\b/);
+    expect(ring.className).toMatch(/-inset-1/);
+    expect(ring.className).toMatch(/border-2/);
+    expect(ring.className).toMatch(/opacity-0/);
+  });
+
+  it("renders one ring inside each of the row's buttons", async () => {
+    await render("row");
+    const buttons = [...el.querySelectorAll("button[data-share]")];
+    expect(buttons).toHaveLength(3);
+    for (const b of buttons) {
+      expect(b.querySelectorAll(":scope > [data-share-ring]")).toHaveLength(1);
+    }
+  });
+
+  it("flashes once when a mouse moves onto the trigger", async () => {
+    await render("menu");
+    hover(trigger());
+    expect(animate).toHaveBeenCalledTimes(1);
+    expect(animate.mock.contexts[0]).toBe(rings()[0]);
+    expect(animate).toHaveBeenCalledWith(
+      [
+        { offset: 0, opacity: 0.95, transform: "scale(1)", easing: "linear" },
+        {
+          offset: 0.2,
+          opacity: 0.95,
+          transform: "scale(1)",
+          easing: "ease-out",
+        },
+        { offset: 1, opacity: 0, transform: "scale(1.04)" },
+      ],
+      { duration: 400 },
+    );
+  });
+
+  it("ignores a new hover while the ring is still playing", async () => {
+    await render("menu");
+    hover(trigger());
+    anim.currentTime = 250;
+    hover(trigger());
+    expect(animate).toHaveBeenCalledTimes(1);
+    // Done: the next hover plays it again.
+    anim.playState = "finished";
+    anim.currentTime = 400;
+    hover(trigger());
+    expect(animate).toHaveBeenCalledTimes(2);
+  });
+
+  it("flashes each row button's own ring", async () => {
+    await render("row");
+    const x = el.querySelector('[data-share="x"]')!;
+    hover(x);
+    expect(animate).toHaveBeenCalledTimes(1);
+    expect(animate.mock.contexts[0]).toBe(x.querySelector("[data-share-ring]"));
+  });
+
+  it("flashes on keyboard focus (focus-visible), not on other focus", async () => {
+    await render("menu");
+    const visible = vi.spyOn(trigger(), "matches");
+    visible.mockReturnValue(false);
+    trigger().focus();
+    expect(animate).not.toHaveBeenCalled();
+    trigger().blur();
+    visible.mockImplementation((sel: string) => sel === ":focus-visible");
+    trigger().focus();
+    expect(animate).toHaveBeenCalledTimes(1);
+  });
+
+  it("leaves touch and pen hovers alone", async () => {
+    await render("menu");
+    hover(trigger(), "touch");
+    hover(trigger(), "pen");
+    expect(animate).not.toHaveBeenCalled();
+  });
+
+  it("has no ring under reduced motion", async () => {
+    media.reduced = true;
+    await render("menu");
+    expect(rings()).toHaveLength(0);
+    hover(trigger());
+    expect(animate).not.toHaveBeenCalled();
+  });
+
+  it("has no ring with a coarse pointer", async () => {
+    media.fine = false;
+    await render("row");
+    expect(rings()).toHaveLength(0);
+    hover(el.querySelector('[data-share="copy"]')!);
+    expect(animate).not.toHaveBeenCalled();
+  });
+});
diff --git a/tests/client/ShareBase.test.ts b/tests/client/ShareBase.test.ts
index a78a6d2cf16..3c4e676a2af 100644
--- a/tests/client/ShareBase.test.ts
+++ b/tests/client/ShareBase.test.ts
@@ -138,16 +138,28 @@ describe("deriveShareBase", () => {
 });
 
 describe("playerProfileUrl", () => {
-  it("hangs the profile hash off the share base, not off window.location", () => {
-    const shareBase = vi
-      .spyOn(ClientEnv, "shareBase")
-      .mockReturnValue("https://openfront.io/");
+  it("is the site's /player/<id> path off the share origin, not off window.location", () => {
+    const shareOrigin = vi
+      .spyOn(ClientEnv, "shareOrigin")
+      .mockReturnValue("https://openfront.io");
     try {
-      expect(playerProfileUrl("a+b")).toBe(
-        "https://openfront.io/#modal=profile&publicID=a%2Bb",
+      expect(playerProfileUrl("aB3dE5fX")).toBe(
+        "https://openfront.io/player/aB3dE5fX",
       );
+      expect(playerProfileUrl("a+b")).toBe("https://openfront.io/player/a%2Bb");
     } finally {
-      shareBase.mockRestore();
+      shareOrigin.mockRestore();
+    }
+  });
+
+  it("drops the page's own path (a link copied from /c/CODE is still the profile)", () => {
+    history.replaceState(null, "", "/c/abc");
+    try {
+      expect(playerProfileUrl("aB3dE5fX")).toBe(
+        `${window.location.origin}/player/aB3dE5fX`,
+      );
+    } finally {
+      history.replaceState(null, "", "/");
     }
   });
 });
diff --git a/tests/client/components/FriendsListPublicIdInput.test.ts b/tests/client/components/FriendsListPublicIdInput.test.ts
index f6fdeebd371..fd5646e0824 100644
--- a/tests/client/components/FriendsListPublicIdInput.test.ts
+++ b/tests/client/components/FriendsListPublicIdInput.test.ts
@@ -10,6 +10,18 @@ describe("extractPublicIdFromUrl", () => {
     ).toBe("95UoOPh3");
   });
 
+  it("keeps only the id from the canonical /player/<id> link", () => {
+    expect(extractPublicIdFromUrl("https://openfront.io/player/95UoOPh3")).toBe(
+      "95UoOPh3",
+    );
+    expect(
+      extractPublicIdFromUrl("https://openfront.io/player/95UoOPh3/?tab=games"),
+    ).toBe("95UoOPh3");
+    expect(
+      extractPublicIdFromUrl("http://localhost:9000/w0/player/95UoOPh3"),
+    ).toBe("95UoOPh3");
+  });
+
   it("handles https links and other hash params in any order", () => {
     expect(
       extractPublicIdFromUrl(
diff --git a/tests/client/graphics/layers/WinModalXp.test.ts b/tests/client/graphics/layers/WinModalXp.test.ts
index f3084eb610d..4d52497d01c 100644
--- a/tests/client/graphics/layers/WinModalXp.test.ts
+++ b/tests/client/graphics/layers/WinModalXp.test.ts
@@ -64,6 +64,7 @@ import type { GameXpPanel } from "../../../../src/client/components/GameXpPanel"
 import "../../../../src/client/components/LegendCeremony";
 import "../../../../src/client/hud/layers/WinModal";
 import type { WinModal } from "../../../../src/client/hud/layers/WinModal";
+import { playerProfileUrl } from "../../../../src/client/utilities/PlayerProfileUrl";
 import type { GameView } from "../../../../src/client/view";
 
 const GAME_ID = "gXPTEST01";
@@ -529,6 +530,12 @@ describe("WinModal XP section", () => {
       expect(
         ceremony()!.querySelector("[data-legend-line] b")!.textContent,
       ).toBe((2106720).toLocaleString());
+      // The player's own Legend moment to share.
+      expect(
+        ceremony()!.querySelector<HTMLElement & { url: string }>(
+          "[data-legend-share] profile-share",
+        )!.url,
+      ).toBe(`${playerProfileUrl("me")}?moment=legend`);
       ceremony()!
         .querySelector<HTMLButtonElement>("[data-legend-continue]")!
         .click();
@@ -1209,4 +1216,154 @@ describe("WinModal XP section", () => {
     expect(xpState()).toBe("hidden");
     expect(fetchMock).not.toHaveBeenCalled();
   });
+
+  // --- Sharing a milestone ---------------------------------------------------
+
+  // A game that reaches the given levels at prestige 0.
+  function reaching(levels: number[]) {
+    return eligible({
+      before: {
+        prestige: 0,
+        level: levels[0] - 1,
+        xpInLevel: 300,
+        xpForNext: 400,
+      },
+      after: {
+        ...eligible().after,
+        level: levels[levels.length - 1],
+        xpInLevel: 12,
+        xpForNext: 2410,
+      },
+      levelsReached: levels.map((level) => ({ prestige: 0, level })),
+    });
+  }
+
+  const shareEl = () =>
+    modal.querySelector<
+      HTMLElement & { url: string; text: string; label: string }
+    >("[data-win-share]");
+
+  it("offers to share a milestone in the footer once the reveal has shown it", async () => {
+    stubXpEndpoint([() => json(reaching([50]))]);
+    await mount(makeGame({ ended: true }));
+    expect(panel()!.getAttribute("data-xp-revealing")).toBe("true");
+    // Not while the reveal is still getting there.
+    expect(shareEl()).toBeNull();
+    await finishReveal();
+    const share = shareEl()!;
+    expect(share).not.toBeNull();
+    // In the footer, with the modal's own buttons.
+    expect(share.parentElement).toBe(
+      modal.querySelector('[data-win-action="exit"]')!.parentElement,
+    );
+    expect(share.label).toBe('progression.share_moment_level:{"level":50}');
+    expect(share.url).toBe(`${playerProfileUrl("me")}?moment=level50`);
+    expect(share.text).toBe('progression.share_text_level:{"level":50}');
+    await (share as unknown as { updateComplete: Promise<unknown> })
+      .updateComplete;
+    expect(
+      share.querySelector('[data-share="menu"]')?.textContent?.trim(),
+    ).toBe('progression.share_moment_level:{"level":50}');
+  });
+
+  it("also appears when the reveal plays out on its own", async () => {
+    stubXpEndpoint([() => json(reaching([25]))]);
+    await mount(makeGame({ ended: true }));
+    expect(shareEl()).toBeNull();
+    await settle(60_000);
+    expect(panel()!.getAttribute("data-xp-revealing")).toBeNull();
+    expect(shareEl()?.url).toBe(`${playerProfileUrl("me")}?moment=level25`);
+  });
+
+  it("shares the highest milestone when a game reaches several", async () => {
+    stubXpEndpoint([() => json(reaching([10, 11, 12, 25, 26]))]);
+    await mount(makeGame({ ended: true }));
+    await finishReveal();
+    expect(shareEl()?.label).toBe(
+      'progression.share_moment_level:{"level":25}',
+    );
+    expect(shareEl()?.url).toBe(`${playerProfileUrl("me")}?moment=level25`);
+  });
+
+  it("shares becoming a Legend rather than the level", async () => {
+    stubXpEndpoint([
+      () =>
+        json(
+          eligible({
+            before: {
+              prestige: 10,
+              level: 99,
+              xpInLevel: 4400,
+              xpForNext: 4510,
+            },
+            after: {
+              ...eligible().after,
+              prestige: 10,
+              level: 100,
+              xpInLevel: 0,
+              xpForNext: 0,
+              legend: true,
+            },
+            levelsReached: [{ prestige: 10, level: 100 }],
+          }),
+        ),
+    ]);
+    await mount(makeGame({ ended: true }));
+    await finishReveal();
+    expect(shareEl()?.label).toBe("progression.share_moment_legend");
+    expect(shareEl()?.url).toBe(`${playerProfileUrl("me")}?moment=legend`);
+    expect(shareEl()?.text).toBe("progression.share_text_legend");
+  });
+
+  it("offers nothing for an ordinary level-up", async () => {
+    stubXpEndpoint([() => json(reaching([47]))]);
+    await mount(makeGame({ ended: true }));
+    await finishReveal();
+    expect(xpState()).toBe("result");
+    expect(shareEl()).toBeNull();
+  });
+
+  it("offers nothing to a signed-out player", async () => {
+    isLoggedIn.mockResolvedValue(false);
+    stubXpEndpoint([() => json(reaching([50]))]);
+    await mount(makeGame({ ended: true }));
+    await finishReveal();
+    expect(xpState()).toBe("signed_out");
+    expect(shareEl()).toBeNull();
+  });
+
+  it("offers nothing without a public ID to link to", async () => {
+    getUserMe.mockResolvedValue({
+      ...signedIn,
+      player: { ...signedIn.player, publicId: "" },
+    });
+    stubXpEndpoint([() => json(reaching([50]))]);
+    await mount(makeGame({ ended: true }));
+    await finishReveal();
+    expect(xpState()).toBe("result");
+    expect(shareEl()).toBeNull();
+  });
+
+  it("never offers it for a provisional figure", async () => {
+    stubXpEndpoint([() => json(reaching([50]))]);
+    await mount(makeGame({ ended: true }));
+    await finishReveal();
+    expect(shareEl()).not.toBeNull();
+    // The same milestone, but not yet confirmed by the server.
+    const provisional = { kind: "provisional", data: reaching([50]) };
+    Object.assign(modal as unknown as { xpView: unknown }, {
+      xpView: provisional,
+    });
+    await settle();
+    expect(shareEl()).toBeNull();
+    // Even if the panel reported it settled.
+    modal.querySelector("game-xp-panel")!.dispatchEvent(
+      new CustomEvent("xp-reveal-settled", {
+        detail: provisional,
+        bubbles: true,
+      }),
+    );
+    await settle();
+    expect(shareEl()).toBeNull();
+  });
 });
diff --git a/tests/server/PlayerProfileRoute.test.ts b/tests/server/PlayerProfileRoute.test.ts
new file mode 100644
index 00000000000..f9bc4ae94a9
--- /dev/null
+++ b/tests/server/PlayerProfileRoute.test.ts
@@ -0,0 +1,77 @@
+import express from "express";
+import http from "http";
+import type { AddressInfo } from "net";
+import { afterEach, beforeEach, describe, expect, test, vi } from "vitest";
+
+const renderAppShellMock = vi.hoisted(() => vi.fn());
+
+vi.mock("../../src/server/RenderHtml", () => ({
+  renderAppShell: renderAppShellMock,
+}));
+
+import { registerPlayerProfileRoute } from "../../src/server/PlayerProfileRoute";
+import { stripWorkerPrefix } from "../../src/server/WorkerPathPrefix";
+
+describe("profile link route", () => {
+  let server: http.Server;
+  let base: string;
+  const log = { error: vi.fn() };
+
+  beforeEach(async () => {
+    renderAppShellMock.mockReset();
+    renderAppShellMock.mockImplementation(
+      async (res: express.Response, htmlPath: string) => {
+        res.setHeader("Content-Type", "text/html");
+        res.send(`<html>shell:${htmlPath.replace(/\\/g, "/")}</html>`);
+      },
+    );
+    log.error.mockReset();
+    const app = express();
+    // As the worker mounts it: the /w<n> prefix is stripped before routing.
+    app.use(stripWorkerPrefix(0));
+    registerPlayerProfileRoute({
+      app,
+      log: log as never,
+      baseDir: "/srv/app/dist/server",
+    });
+    server = http.createServer(app);
+    await new Promise<void>((resolve) => server.listen(0, resolve));
+    base = `http://127.0.0.1:${(server.address() as AddressInfo).port}`;
+  });
+
+  afterEach(async () => {
+    await new Promise<void>((resolve) => server.close(() => resolve()));
+  });
+
+  test("serves the app shell for a profile path", async () => {
+    const res = await fetch(`${base}/player/aB3dE5fX`);
+    expect(res.status).toBe(200);
+    expect(res.headers.get("content-type")).toContain("text/html");
+    expect(await res.text()).toContain("shell:/srv/app/static/index.html");
+  });
+
+  test("serves it with a trailing slash, a tab, and the worker prefix", async () => {
+    for (const path of [
+      "/player/aB3dE5fX/",
+      "/player/aB3dE5fX?tab=progression",
+      "/w0/player/aB3dE5fX",
+    ]) {
+      const res = await fetch(`${base}${path}`);
+      expect(res.status, path).toBe(200);
+      expect(await res.text(), path).toContain("shell:");
+    }
+  });
+
+  test("leaves other paths alone", async () => {
+    expect((await fetch(`${base}/player`)).status).toBe(404);
+    expect((await fetch(`${base}/player/a/b`)).status).toBe(404);
+    expect(renderAppShellMock).not.toHaveBeenCalled();
+  });
+
+  test("answers 500 when the shell can't be rendered", async () => {
+    renderAppShellMock.mockRejectedValue(new Error("missing index.html"));
+    const res = await fetch(`${base}/player/aB3dE5fX`);
+    expect(res.status).toBe(500);
+    expect(log.error).toHaveBeenCalled();
+  });
+});
diff --git a/vite.config.ts b/vite.config.ts
index e0f6f3ea5a3..aa0b26a1c6a 100644
--- a/vite.config.ts
+++ b/vite.config.ts
@@ -288,7 +288,10 @@ export default defineConfig(({ mode }) => {
     },
   });
 
-  // In dev, redirect visits to /w*/game/* to "/" so Vite serves the index.html.
+  // In dev, redirect visits to /w*/game/* and /w*/player/* to "/" so Vite
+  // serves the index.html. Only the /w<n> proxies below call this: a bare
+  // /player/<id> isn't proxied, so Vite's SPA fallback serves it the
+  // index.html already, as the master's fallback does in production.
   const devGameHtmlBypass = (req?: {
     url?: string;
     method?: string;
@@ -301,7 +304,7 @@ export default defineConfig(({ mode }) => {
       : (accept ?? "");
     if (!acceptValue.includes("text/html")) return undefined;
     if (!req.url) return undefined;
-    if (/^\/w\d+\/game\/[^/]+/.test(req.url)) {
+    if (/^\/w\d+\/(?:game|player)\/[^/]+/.test(req.url)) {
       return "/";
     }
     return undefined;